What to do when your Drupal site has been hacked