strange injection in index.php

[eluser]loosetops[/eluser]
It is not a CodeIgniter exploit.

That exploit has been going around for last couple of months, and it is linked to compromised ftp, sftp and ssh accounts.

A trojan on a machine captures the ftp/sftp/ssh login information and then appends a Javascript payload downloading code to one or more .php,.html files.