[darkpuppet]

According to the hosting provider we were compromised in a hack.

Someone did place malware somewhere on the site, but it wasn't linked from our site, and it wasn't placed through the site's software.
I get a feeling someone built a site, and found a symlink vulnerability to our shared hosting directory and dropped some crud in there.

Of course, the timing couldn't have been worse, since it happened about 3 days into my 2 week vacation, and then I had courses and personal stuff I had to do while trying to get the site restored.

To their credit, the hosting provider was nice enough to let me grab the database before wiping and recreating the account, so we were able to retain all of our posts and users with only a minimum amount of grief. That part took a little longer than I had hoped since they had to make an exception to their policies to make it happen.

So all-in-all it was just one of those perfect storms of vacation-hacked-bad backups-support delays....

Hopefully we're back on track now -- just need to re-enable stuff like tapatalk, and the new skins, which will come over the next few weeks.