All I want is to make it as hard as possible to gain access to my website. I've implemented the other recommendations, such as an exclusive FTP account, removing the league file links from my website, etc... Fixing this hole will be just another step that makes it harder to hack my site.
I'm sure most of you would agree that if you make it hard enough, the hacker will move on to find another site. After all, if they wanted to WORK, they'd have jobs.