I have built my husbands site from scratch (okay using DW)... and I have never had any problems with it. But for the tha last week it has been getting hacked. iframes of a page, the first time I caught it it was a virus that was put on 4 pages.
I have changed the permissions to 444 on just about all the pages and added this:
<Files php.ini>
Order allow,deny
Deny from all
</Files>
to the htaccess file... but things are still happening...
any ideas on what more I can do
