راهنمایی کنید هک شدن سایت و راهکار !؟

[Nomix]

سلام دوستان

امروز سایتم از دسترس خارج شده بود بعد بررسی دیدم که فایل wp-config.php تغییر کرده !

<?php
/**
 * The base configuration for WordPress
 *
 * The wp-config.php creation script uses this file during the
 * installation. You don't have to use the web site, you can
 * copy this file to "wp-config.php" and fill in the values.
 *
 * This file contains the following configurations:
 *
 * * MySQL settings
 * * Secret keys
 * * Database table prefix
 * * ABSPATH
 *
 * @link https://codex.wordpress.org/Editing_wp-config.php
 *
 * @package WordPress
 */


// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define('DB_NAME', '7737_abtt');


/** MySQL database username */
define('DB_USER', '7737_abtt');


/** MySQL database password */
define('DB_PASSWORD', 'k310k310');


/** MySQL hostname */
define('DB_HOST', 'gbddm1.atthost24.pl');


/** Database Charset to use in creating database tables. */
define('DB_CHARSET', 'utf8mb4');


/** The Database Collate type. Don't change this if in doubt. */
define('DB_COLLATE', '');


/**#@+
 * Authentication Unique Keys and Salts.
 *
 * Change these to different unique phrases!
 * You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
 * You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
 *
 * @since 2.6.0
 */
define('AUTH_KEY',         '&lEbEf#vRu5V%WuTH_lVmuU_^/$_Z^++GQk_(A($d^gb5t`7;a$&]1,`x;uA OtS');
define('SECURE_AUTH_KEY',  '=zwTT33GO7x`*d)WvgB`mxhIibo{*?oMR18*F|Ic?7zV}UN~b6T;,7^<apl?Qo?q');
define('LOGGED_IN_KEY',    'SsBhHP.c`yv!SX m ]VijK_<AWyY]12V^cAjwJQByqES#C8-1c88V&.6o(6vk%,U');
define('NONCE_KEY',        '4+_6Gs2S3>Pq7~U[`&z/5<U.y2sc;:.*_/<PEM%@5 @s)wiNT5BW7*PZ4Ob8z1mY');
define('AUTH_SALT',        'W*5j_;SvFE]jvf|F9$!M[6s;i7Z~!Q+OG5.Z8)g6-$V=cE,a_!:zyi)/GiK]GYFI');
define('SECURE_AUTH_SALT', '@!Cs6[ w2Sd46ti{>DjgB`c~ o#Na}W1r1I.Tuec>-m!V3Oi^:H&LbsVxY`zO59O');
define('LOGGED_IN_SALT',   ' b#Rto+nf,@/4W+eg78<oW2BiYd7jfG5gx7X,3rS*F.2%4 G!kJOLn0p_Mzhrp#4');
define('NONCE_SALT',       'h12*]2(Hn=sB_;XC a{F[tTmH+{$Aalx%ev=y-7{2^]_E[^3(5;b;FZpTFu}E@^@');


/**#@-*/


/**
 * WordPress Database Table prefix.
 *
 * You can have multiple installations in one database if you give each
 * a unique prefix. Only numbers, letters, and underscores please!
 */
$table_prefix  = 'wp_648';


/**
 * For developers: WordPress debugging mode.
 *
 * Change this to true to enable the display of notices during development.
 * It is strongly recommended that plugin and theme developers use WP_DEBUG
 * in their development environments.
 *
 * For information on other constants that can be used for debugging,
 * visit the Codex.
 *
 * @link https://codex.wordpress.org/Debugging_in_WordPress
 */
define('WP_DEBUG', false);


/* That's all, stop editing! Happy blogging. */


/** Absolute path to the WordPress directory. */
if ( !defined('ABSPATH') )
	define('ABSPATH', dirname(__FILE__) . '/');


/** Sets up WordPress vars and included files. */
require_once(ABSPATH . 'wp-settings.php');

بعد از اصلاح فایل مشکل سایت بر طرف شد .

لطفا در این زمینه راهنمایی کنید دلیل این مشکل چیست و چگونه از این اتفاق جلوگیری کنیم ؟


سپاس

[ایران نشر]

فایل wp-config.php به یک پوشه قبل از www منتقل کن و سطح دسترسی اون رو 400 تنظیم کن