We recently experienced a hacker attack, writing directly to the server through php cgi.
I have afterwards made a number of security updates, most importantly disabled mod_cgi in Apache2 which weren't needed anyway. However when i run 'Top', php-cgi is however still appearing from time to time. How is that posible? Is php-cgi different from mod_cgi and do i need to also disable the module in php?