Thank you so much! I've fulfilled all your recommendations. Meanwhile, I am puzzled with the means my account was hacked with and try to seal all the possible security holes to avoid such an incident in the future. Could the hacker sneak into my site through the mail form driven with mailer.php?