The issue: Wrong access permissions makes it easier to take over your webserver
The solution: Fix your access rights
- No writeable and excuteable files in your webroot.
- No writeable PHP files.
- Disallow external read access to files which contains classes, configuration or application code.