Someone keeps hacking me

im really not keen on doing that. i am to scared incase i loose anything or something goes wrong! Would anyone from here be able to do it for me?

Iv actually done everything and everything seems to work still. Getting all users to change their password now. In the mean time i am unsure of what file permission each file/folder should have. I have config set to 750, the rest are 755.

Ok, i have everything as it says now. I have also now moved to a dedicated server with SSL and SSH. This should help secure everything a bit more!