[The Geek]

Originally Posted by MarcoH64

Chances are big that this was not done using GAS, but that this file by coincidence ended up in the GAS directory.

This kind of hack is mostly done by someone gaining access to your server using Telnet/SSH (or maybe FTP) and placing his files in many directories, probably also using many different names, or even modifying existing files.

You should consider your server as infected and insecure at this time, and your passwords to be compromised. I suggest you contact your host about cleaning the server and resetting all passwords.

I agree with Marco.

On a side note - I have ran some tests and the GAS folder (and contents) can (and I guess should) be chmod 0775 as long as the apache (or nobody, or whatever account PHP runs under) has ownership and therefore access to write.