Hacked!

[eluser]asylmottaket[/eluser]
Hi guys,

I just found out that a site Ive made in CI just got hacked/compromized.

Line 118 in index.php

Code:

/* End of file index.php */
/* Location: ./index.php */<!-- bastest t1 -->

Googleing the "<!-- bastest t1 -->" gave me only one result:

http://forum.joomla.org/viewtopic.php?f=444&p=1670508



The only user input that I can think of, is the query string:
like domain.com/page/[numeric-ID] ..but I'm checking the ID like:

Code:

if(ctype_digit($id) === FALSE)
        {
            redirect('/page');
            exit();
        }

So I'm not quite sure how this could have happend.

define('CI_VERSION','1.6.3'); ..should probably updated though. But would this happen in CI 1.7.1 ?