find /home/zzz/public_html/ ( -name “*.php” -o -name “*.html” -o -iname “*.htm” ) -exec grep -l “xxx” {} ; -exec sed -i “/”xxx”/d” {} ;

where zzz is the account and xxx is the iframe code

———————————————————————————–

Add these lines into .htaccess

RewriteEngine On

RewriteCond %{QUERY_STRING}    ^.*(;|<|>|’|”|)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/*|union|select|insert|cast|set|declare|drop|update|md5|benchmark).* [NC]
RewriteRule .* – [F]