Hi there!

There are many different ways a website can be hacked, it’s hard to give specific advise if you don’t provide more details.

In any case, it it keeps happening, it’s a sign that your application has some serious security hole - sometimes it’s not your application itself, but a plugin or theme that has a vulnerability for allowing arbitrary uploads.

Are those WordPress websites?