My website was taken down a day back - got a message form the host saying that they recieved a complaint from the Bank of America that my website was being used for phishing customers. I managed to bring my site online and found a number of weird code snippets and files on the site that I didn't put there. They were definitely put by a hacker but now I'm scared with regards to how did the hacker get into my site and put his files there.
What can I do to prevent something like this happening again!?!?!?