did you get their IP?, well you can find traces on your access logs...IF they didn't clear it.. What method did the used??
Lol look at this http://www.juatuba.mg.gov.br/webmail/data/ Isnt that a government site? Thats kind of cool they got into that lol Tyler
Thats a server wide problem, as the host haven't written down mod_sec rules and disable_functions to prevent problematic things like c99 shell etc. Talk to your host regarding this.
im using wordpress. i changed the permissions and alerted my host. haven't had a problem since. i think the key is to change the permission so wannabe hackers can't get to your files.