So, we were hacked.

99% annoyance, 1% actual damage done. The hacker yoinked the password hashes from the first 50 users, injected some malware iframes into one of the skins, and attempted to inject code to let him come back and fuck around (foiled!).

We ended up going through and reinstalling the forum from scratch, and fixin' stuff. We're keeping track of who changes their passwords when, but nothing is being done with it yet -- it may turn into a security mod, requesting a change of password on an annual basis.

Entry title: Voodoo Dolls.