Still a bit of a hack
madpride/index.php kept on being updated - and not a pword hack. Inject preg_replace code!
There are spam links. It is probably the Forum. But all apps are being upgraded to the latest and this is a long process.
Zenphoto done
Blogs done 3.5 3.7 3.9 4.1 4.22
Ahah - been a week now and no horrible code added to index.php