Recently my drupal site is hacked. When i see website log from drupal admin panel someone trying to inject code from url. I searched my website(drupal) directory lots of code in page appended and new files are created.
My question is that
- Is this possible to inject code from url
- If use how to protect them in drupal