It appears my site was hacked twice. Yesterday they replaced the admin login and password. Today they had a new password.
So, now I'm going to upgrade from 1.5.3 to 1.5.12. I have the TerraTribune template. Do I need to do anything special when I upgrade?--I can't recall if TT requires me to change anything in the Joomla files.
I don't see any damage done by the hacker. Is there anything specific I should be looking for?
Any other obvious things I can do to block the hacker?