how to protect index.php files from script injections?
Every few months I find that all index.php files on my site have been script injected, and this results in an inoperative site. I keep changing passwords, have changed permissions on those files to 444, and still this happens. What more can I do?