someone is trying to change my ci index file how to make it secure

It could come from numerous sources as explained in your other topic...

FTP is likely (so check FTP logs). Or some code in your website allows a visitor to upload file, where your code does not validate that the uploaded file is an image for example so someone could upload a .php file.