The issue: Wrong access permissions makes it easier to take over your webserver The solution: Fix your access rights No writeable and excuteable files in your webroot. No writeable PHP files. Disallow external read access to files which contains classes, configuration or application code.