Thanks for the good tip, I made all the changes. Like Golfman...let hope it helps
Ranko, I made it a 50 digit number (in config) and noting funny happend, all works fine. Still (after 5 years of Snitz) I have no idea what this number is for.
it is just the session cookie to check if you are logged in to the admin area, and as said a couple of posts ago, it is the PM stuff that was the root of the hack not the session cookie as was forst thought. I initially said it was the session cookie because MarcelG only posted a few lines of his log where it looked like someone had logged into the admin area, it wasn't until I examined the whole log that it became clear that the PM code was responsible not the session cookie