I guess we were hacked, but it seems to only be the homepage we were working on and not the forum itself (see the link in my signature).
It seems this was due to a trust issue and not an exploit. The owner and I gave server info. to one of the admins that joined on December 5, 2011 and recently left in a weird manner and didn't let anyone know except for one of other (trusted) admins via a PM.
Anyway, I changed the password for the server, and if nothing else happens, then I guess it was that. The only problem is I don't know how to personally fix it since it was done via the server, and I'm not sure if our owner would know (no offense to him, of course).
__DEFINE_LIKE_SHARE__