Nah, but if he had access to FTP he would've probably defaced my other site that's on the same FTP. The server logs just show him using the front end site, viewing my user profile, then logging in as administrator.

He's probably using a variation of this exploit: http://securitydot.net/xpl/exploits/...1/exploit.html