Codeigniter Site Hacked

[eluser]Patient[/eluser]
[quote author="audiopleb" date="1241013149"]It was probably a dictionary attack on FTP users on your server. You need to change all active ftp usernames and passwords to something complex as a first thing, then restore the site they messed with from backup if possible.

Also if there were any passwords or usernames for DB access in your CI site, you need to change those too.[/quote]

Thanks audiopleb.

Changing things now (may sound a bit dim but i missed the fact that in retrieving the config/database files they got password access to my database!!).