SPAM

[Spanner_smf2_import2]

Yes, I saw that.  Looks like someone from Brazil.  My recommendation, is to pretend that the hackers got access to the username and password information for all parties, and if you use your CSC user and password combo anywhere else, start going through a process of changing that password.

If you use that password in a pattern that might be worth changing elsewhere too.  Painful, but the alternative is more painful.

This was not a DB hack. This was script kiddies uploading a PHP file somehow to the the root directory. This has happened because no one is maintaining the site. I have uploaded the most recent patches to the site and applied the correct permissions to the folders\files after the updates.

Unless someone does take over looking after the site, this will happen again in the future. We have backups as a fallback, but I don't have the time.