I think my CMS Made Simple has been hacked

[staartmees]

replace the index.php on the server with the original one.

[manuel]

It also can't hurt to download a copy of your website files and use a program to compare them to the files of a fresh cmsms install. (use the same version of the fresh install you are using!)

Personally, i like freecommander for comparing files...

Also download a copy of your mysql db and search for "iframe", "porn", ... in it, manually clean it out and restore the db.

Greetings,
Manuel

[manuel]

Damn, that's looking nasty!

I would set up a fresh install of the latest version of cmsms and manually recreate your website using all the latest versions of the modules you used.
You can use cgcontentutils to export/import your page tree (if there's no filth in your page content), that should save you some time

http://dev.cmsmadesimple.org/projects/cgcontentutils

This way you can be sure there's absolutely no trace left of the hack...

Greetings,
Manuel