title: Joomla Sites .htaccess keeps getting hacked
body: <p>I am running 1.5.25 and somehow a .htaccess file keeps getting created on my root.</p>
  
  <pre><code>ErrorDocument 400 http:// redirected url index.php                                                                                                                      
  ErrorDocument 404 http:// redirected url index.php  index.php                                                                                                                       
  ErrorDocument 500 http://redirected url /index.php  
  
  &lt;IfModule mod_rewrite.c&gt;                                                                                                                        
  RewriteEngine On                                                                                                                        
  RewriteCond %{HTTP_REFERER} ^.*(google|ask|yahoo|baidu|youtube|wikipedia|qq|excite|altavista|msn|netscape|aol|hotbot|goto|infoseek|mamma|alltheweb|lycos|search|metacrawler|bing|dogpile|facebook|twitter|blog|live|myspace|mail|yandex|rambler|ya|aport|linkedin|flickr)\.(.*)                                                                                                                     
  RewriteRule ^(.*)$ http://redirected url index.php   [R=301,L]                                                                                                                      
  &lt;/IfModule&gt;
  </code></pre>
  
  <p>I would like to know how to find out who creates this .htaccess file even when deleted. Is there a away to find out which script creates this? Which user creates it?</p>
  
  <p>Anyone who has had this problem before? Is there a way I can create a .htaccess and disable it from being changed. Applying 644 permission setting does not seem to help.</p>
  
  <p>NOTE: I have changed actual redirect URL to redirected url index.php    </p>