.htaccess hacked

[giateno]

Hello,

we had our .htaccess hacked several times in the last months.
We have 777 permissions on it, because we have a php script that needs to access it daily.
We often changed ftp password, register_globals is off but it keeps on happening.
I do understand that 777 permissions could be the issue, but we need it for the php script to work. Moreover, even to modify a 777 the file, who did this needs to access somehow the server.
Do you have any experience/idea of how they could access and edit the file?

Thanks!

[Leosghost]

You say "we" ..are every ones machines clean ? no keyloggers etc..and has the server been wiped and reinstalled ..or did you just change passwords and hope they left nothing inside that would open the door for them again..

look at your logs just prior to the hack..