My forum has been compromised
 

Somehow someone managed to change my forums index page, as well as the admin CP's index page. This is inconcievable. How? How can you change a page without having FTP access?

There's only one admin user, and one FTP account, both of which are mine. The passwords are both different, and both cryptographically strong. So my question is how. Without FTP how do you change someone's web pages?

Do you have HTML endabled on the forum?

no, and you have to be a registered user to post. All of my registered users are people I know personally.

are you on shared hosting?

.: Owned By :.

nEt^DeViL

<^ aBO mOh4mM3d ^>

Yes. How can somone else's hosting account affect the content of my own?

if the host dont have there server secure then you can go into others accounts via different scripts you upload. did you write the host and ask them to look at the server logs?