Why .htaccess is where hackers hide after you delete the malware
Website Security
A Joomla rental site carried 126 weaponised .htaccess files after a full malware cleanup, and every signature scanner missed them because scanners check PHP, not Apache configuration....