I will move your thread to 'GNU/Linux Helps' because this thread not related to Kloxo-MR but your php code.
Possible, he have 'backdoor' on your website and or your code not good.
Usually, just enough disable functions for 'exec,passthru,shell_exec,system,proc_open,popen,show_source' (default from Kloxo-MR).