[cloyal]

Thats what I thought as for the hack job, and I only had to replace the index file in two places. As for my server I contacted them immediately early this morning when it happened and they gaver this response.

Hello,

The most common way to hack a site is through php. If this person found an
exploit in your forum software, they can make adjustments to any file they
chose. It's a good idea to update any php software often, as security holes are
found and fixed in every new release. Our logs are not specific enough to tell
who changed a file, or when. You may be able to find it in your stats pages, but
those will show you anybody visiting your site around that time.

I'm currently running 3.5.4. Not sure where they got in, just want to prevent it from happening again.