Looked like they got cracked by some kidd0 "wiv sum 1337 t00lz". My backups are at home in England so when I go home I'll fix it Im in the process of getting information of last edited of my index.php etc
Its beyond me how these script kiddies just crack anything even if it is a useful project.
edit: Move this topic, the whole DXALPHA server was hacked and its sub-domains