Laravel index.php hacked, can maybe someone have ideahow it done?

I use laravel to developing and have own website based on laravel. But someone hacked my website(without password) and change index.php from public folder and write something like this "It's hacked, Sorry". Did anybody know how that possible and how to disable him to do that again?

via Chebli Mohamed