I forgot to remove the default admin/admin account on my blog. Somebody got in and has replaced my homepage with some internet graffiti.
.htaccess to replace the page with a 403 error, but no matter what I do, my WordPress homepage is this hacker thing.
How can I set up my server so that ONLY MYSELF can view it while I'm fixing this via
.htaccess? What steps should I take to eradicate them from my server?
If I delete the ENTIRE website and change all the passwords, is he completely gone?