Harold, do you have a way of detecting new files or altered files on a site? It seems to me like a cron job looking for this would detect a lot of hacks??