He hacked it through your admin panel most likely, why not do what we do, password protect the admin folder, harder to hack that then it is just the admin panel, also use 2 diff passwords for the http and the actual forum login.
Just a tip if you care to use it.
__________________
04' Dodge SRT-4, Mopar Stage 3, 406whp/436wtq
|