If I had left my chmod permissions alone or changed them back to their original settings he would have most probaly only deleted my index page and not my whole website

Stop reading things on internet you don't understand.

Spock:"We warp'd through the time-space continuum into another dimension by utilising tahion colision in the wormhole"
Sortie:"....True"

There is no reason what-so-ever for a cgi script to use those commands except to hack your server.

Free scripts aren't the problem, it's when hackers put that stuff in the free script and tell you they wrote it. Don't get copies of scripts from anyone except the original source because it's their reputation they are protecting that makes the script safe.

:1orglaugh

I agree with you there, this script was downloaded from a php script website about 5 months ago , and i cant remember what bloody website it was.