Well, the way the SQL code in that file is ripe for SQL injection, it's possible that the database has been compromised for a while...