I'm running a Joomla 1.7 site which was hacked today. Below script did the hack. ...
My understanding is that you should never host your configuration.php file within the public_html directory (I am specifically referring to Joomla, but I imagine this is a cross-platform scenario). ...