Hi, just stumbled across strange thing. During adding content to my friends site I've noticed extra text line with PHP command at the end of every backend page. It is include of hidden div with links to some sites and pumping up page rank in mind I think. Disturbing question is: how it was added. Site is fairly often updated, hosting company has security in mind. Googling added link shows that many Joomla sites are affected. I think JSST should look into it.

info:
Joomla 1.5.26 with only 2 person access

line added:
echo file_get_contents('### denetci.gen.tr ###');

file affected 2013-04-06:
/administrator/index.php

PS
Thanks for great job!