[Zeitgeist]

That's the whole code of the hack:

// ### WHO WAS ONLINE TODAY ########################
	if (intval($maxusers['maxonline']) <= $totalonline) 
{ 
		$maxusers[0] = $totalonline; 
		$maxusers[1] = TIMENOW; 
} 
$todayloggedinusers = "";
$numbertodayonline = 0;
$numbertodayonlineinvisible = 0;
$todayusers=$DB_site->query("SELECT userid, username, usergroupid, lastactivity, options FROM ".TABLE_PREFIX."user 
	   WHERE lastactivity > " . (mktime(0,0,0,date("m"),date("d"),date("Y")) + (($bbuserinfo['timezoneoffset']-$timeoffset)*3600)) . " 
	   ORDER BY username");
	   
while ($todayuser=$DB_site->fetch_array($todayusers))
{
 $todayuser['options'] = intval($todayuser['options']);
 foreach($_USEROPTIONS AS $optionname => $optionval)
 {
  $todayuser["$optionname"] = iif($todayuser['options'] & $optionval, 1, 0);
 }
 $numbertodayonline++;
 $invisibleuser = '';
 $userid = $todayuser['userid'];
 $lastactivetime = vbdate($vboptions['timeformat'], $todayuser[lastactivity]);
 
 if ($todayuser['invisible']==1 and $bbuserinfo['usergroupid']!=6)
 {
  $numbertodayonlineinvisible++;
  continue;
 }
 if ($todayuser['invisible'] == 1)
 { // Invisible User but show to Admin
  $invisibleuser = '*';
 }
 $username = fetch_musername($todayuser);
 
 if (!$todayloggedinuser)
 {
eval("\$todayloggedinuser = \"".fetch_template('forumhome_todayloggedinuser')."\";");
}else{
eval("\$todayloggedinuser .= \", ".fetch_template('forumhome_todayloggedinuser')."\";");
}
}
$DB_site->free_result($todayusers);
if ($bbuserinfo[usergroupid] == 6) {
 $todayonline = $numbertodayonline;
} else {
 $todayonline = $numbertodayonline - $numbertodayonlineinvisible;
}
	if (intval($maxusers['maxonline']) <= $totalonline) { 
	$maxloggedin = $maxusers[0] . " " . $maxusers[1] . " $numbertodayonline " . TIMENOW; 
	$maxusers[2] = $numbertodayonline; 
	$maxusers[3] = TIMENOW; 
	$DB_site->query("REPLACE INTO " . TABLE_PREFIX . "datastore (title, data) VALUES ('maxloggedin', '" . addslashes(serialize($maxusers)) . "')"); 
}
$todayrecordusers = $maxusers[2];
$todayrecorddate = vbdate($vboptions['dateformat'],$maxusers[3]);
eval("\$todayloggedinusers = \"".fetch_template('forumhome_todayloggedinusers')."\";");