200 lines?! Inquiring minds want to know: did your hacker pile on 200 separate pieces of unspeakable evil, or was he just an unspeakably bad programmer?
Interesting anyway. Are we dealing with a human who gambled that website designers will always look at their sites with the biggest possible viewport, so you'd never notice you'd been hacked?
It goes without saying that you instantly changed all passwords having to do with the site. (Don't know about the rest of you, but for some reason mine uses three different ones. There's one for (S)FTP, one for the stats and I forget the third one. Control panel maybe.)