Webserver down

I've a hacker actively working on the webserver.  Tried to catch him earlier today, caught him just now. He's somehow hijacking to send email via Squidge.  Trying to find the hole so I can plug it up.  Webserver will be off for the next bit until I find the hole.