If some one is trying to hack your web site do the following
1. Try Googling your Host's name with the word hacked see if you can find other instances that happened the same day
2. Switch the website host.
3. Login to your cpanel click on latest visitor under log it will show you the log of visitor that visit to your website. Check the url hit previously. Check for special pattern like ../../
4. Login to ssh try run command find . -mtime -7 // it will give the last modified file for 7 days. Create a list of such file.
5. Try to find out the common url that hacker use to attack to website.
6. Use .htaccess to protect files
This is what a friend of mine told me to pass along due to China hacking ordeal and possibly other countrys hacking
Hope this helps some one