IPB can take my license down because I'm warez forum you know and this against their TOS.

I added ACP security mod to prevent anyone access my ACP.

He didn't changed FTP and control panel passwords, he was playing on the site itself.

How I prevent anyone from screwing up my database

What needed permissions need to SQL database user, may be I set it have not needed permission.