If the hacker gained access to your database, he/she can also create a backdoor file to gain shell access via the output sql. You might want to check for any ma

If the hacker gained access to your database, he/she can also create a backdoor file to gain shell access via the output sql. You might want to check for any malicious/suspicious files in your server that will take shell command as http parameters.