Thank you so much. I will definitely spend some time reviewing the link you sent!

I haven’t determined how the sites got hacked. They both use different hosts, different logins, and different passwords. I did work on both today, but I also worked on 4 other sites and the others are fine.

I changed all of their FTP passwords in cPanel and then submitted my review. Any other ideas (aside from what is on the link)?

Thanks!