A previous developer I have used has got upset and start compromising the files of my website on daily bases (such as changing the index of the site with weird messages, deleting the .htaccess, renaming folders, modifying DB tables). I suspect while he was working on the site, he placed some where in the files option to get remote access to the website's files?!
Because of this I have:
changed the FTP user/pass/DB pass blocked the access from his country's IP range using .htaccess... backed up the entire DB and the FTP files the permissions of the files has been chmod to 644 & 755 (as required)*
This morning when I woke up and try to access my site, I was shocked that access to my site was denied...lol. When I checked the files I have discovered that he modified the .htaccess and placed "allow from" his IP and "deny from" my IP.
Any suggestions on how to solve this hassle would be gladly appreciated.
* I can search with grepwin for any malicious scripts/files/lines/words in the backup files I have, if I know what to look for.