Shop hacked twice

[OwenS]

A friend of me has a shop running on Presta and has been hacked twice within a day. The first time the damage was loss of categories, clients and orders. Second time complete database was dropped...

She's running on 1.3.1.1. but appearantly this isn't safe either...
Anyone an idea how to deal with this and if possible prevent this.

She is really depending on this store, it is her only income (and not even enough for living)

[maestrobo]

With such info, it is hard to have a clue about how the site was hacked.

You need to look at the apache log to investigate.

[jhnstcks]

I would suggest contacting the host, as this is where most incursions originate from.

[OwenS]

With such info, it is hard to have a clue about how the site was hacked.

You need to look at the apache log to investigate.

I understand...but at least your answer gives me something to look for....
When I know more, then I post more things here, just needed a starting point..

[OwenS]

Hmm I have found the access logs.....
Also found things of an IP address that shouldn't ask things of the admin directory..

But honestly, I can't do much with access logs..
Is there anybody who knows if this is sufficient to start finding the cause?

[OwenS]

Have been looking a lot at the log, but still, no idea what happend...
Host found some access ip addresses, but also not directly the problem...damn