I was recently asked to help make a few modifications to an old ASP Classic website.
The div itself was in a header file located inside an include subfolder. As far as I can tell, having just taken the site over, no code modifies this file at all.
Does this mean the web server itself had to have been compromised in order for someone to insert these links?
It seems if that was the case, then whoever did it had to have had some knowledge of how the site worked? Or maybe they just searched for files called 'header'? Although, there is a separate header file for the admin side of the site and that was not modified.
I guess the other possibility is that the old webmaster inserted the links themselves for some personal gain but that seems unlikely.