Site hacked - please help prevent it again

[zippizip]

Hello all,

Wanted to see if someone can tell me what happened to my vBGallery and more importantly how to prevent it in the future. I use version 6.11 and version 3.7.2 of VBulletin.

I noticed something was wrong where we went to the gallery and got a syntax error at line 3316 (admin line 153)

The files that were affected were:
adm-inc.php, adm-index.php, adm-misc.php and pp-inc.php.

Into these files someone inserted code similar to:

Content visible to verified customers only.

all had the code inserted before a

Content visible to verified customers only.

. adm-inc.php at line 153, adm-index.php at line 36, adn-misc.php at line 1077 and pp-inc.php at line 3316.

I'm guessing it's some kind of Javascript injection? What worries me is the

Content visible to verified customers only.

after which were urls for a bunch of my pages as well as a bunch of free drugs, women health, diets, etc. sites.

Any ideas on how to further secure my site would be appreciated. ( I realize I am not current for either vBulletin or vBGallery)

Thanks

Stan at scrappersworkshop.com

[Michael P]

If the files themselves were hacked/modified; it sounds like someone got access to your server and was able to make changes to your files directly. I don't think this would have come from our software - can your host help identify how they got into your server to change the files?