Twice someone has uploaded a whole directory onto my webserver under my websites address. I found it the first time by accident - deleted the folder they had created and changed my passwords. That was 1 month ago. Yesterday I found out they had uploaded another folder. I deleted it, changed my passwords and contacted my host. They said they couldn' t do anything about it - is this right? Someone can just upload pages to my website and I can't stop them?
The real problem is my website is family friendly - and the pages they uploaded were all gaming cheats or adult content. The pages they uploaded are now in the Google index and I can't delete them - tried and Google won't allow it since other pages are now linking to them. The pages don't exist anymore and they pull up a 404.
I'm using Expression Web - anyone have an idea how to stop this?