Code Injected
 

I was lazy, so the fault was mine. I was still using 3.8.0 and somehow, someone injected malware into my forum using an existing admin account on the forum home template of every style. This caused a popup ActiveX control prompt that was linked to a site that firefox wouldnt let me view because it was a known malware site.

Here is the code:

Code:

Im not sure how this was done or what I could have done to stop it. I KNOW the account that was used was a trusted one, my business partner. Is there anything I can do to further protect my site, other than update, which I have done? If you need the full code, I have it also, but didnt think it was necessary to post here.