Do you actually think your passwords are secure ? ... <<Continuation>> Passwords are only "Front Door" security ... If someone gains access through the back door.. everything you have is gone ...
Once access is gained and code is added.. you can ban all you like.. it will not do any good ...
As far as backing up your database / FTP server and or other files ... Once they are taken under control (by the attacker).. It's more of a frustrating.. ego crushing "Slow Kill" as it continues over a period of time ... <<>> It will bring you to the point of giving up ...
Sincerely
CourtneyDS