How securing a hacked website works