This is getting more critical. I thought I cleaned and upgraded all the scripts in this site but the attacker was able to upload files again tonight to send out a bunch of spam as nobody.
Can anybody please tell me which log file to look in to see how they are getting in?
Thanks