title: Securing a website
body: <p>I'm currently looking into a web site that has been hacked for phishing purposes. Apparently, a PHP file was introduced and used to upload files and perhaps change directory permissions. I suspect this was done through a public writable directory or through an unsecure image upload script.</p>
  
  <p>What steps can I take to make the site as secure as possible?</p>