like protecting /home/tmp?

to remove to him to the permission execucion?

they can indicate to us, since hakers enters running sell from tmp!

to fix it all the servants by security!

What I recommend in these cases and what rackshack also recommends most of the time is a server restore.

You should back it up, do the restore, restore the backup, and get yourself a good anti-hacking kit...

You need to turn safe mode ON in you php.ini file.
Sym link /var/tmp to /tmp as well
Perhaps sym link /home/tmp?

Create a separate partition for /tmp with nosuid and noexec

Cheers

like becoming that?