Ack. No wonder the site got hit. It's low-hanging fruit. It's running with FrontPage and PHP. Bad news, no matter which way you slice it.
nothing wrong with php...
however front page server extensions are an open door to most proficient crackers.
who would dare try to corrupt the prototypical php, mysql, apache trinity by mixing in pathetic offerings from microslop?
... and think it would stand for any length of time.