晚上服务器被攻击的，请高手给看看我的文件，什么问题
今天晚上，我的服务器被黑了，屏幕如下图示，后面是我被修改的主页文件，请高手给看看，他怎么进来的，我的漏洞是什么？
index.php
#Hacked By Ramzi Null#
<script><br />
<!--//<br />
function tb9_makeArray(n){<br />
this.length = n;<br />
return this.length;<br />
}<br />
tb9_messages = new tb9_makeArray(4);<br />
tb9_messages[0] = "#Hacked By Ramzi Null";<br />
tb9_messages[1] = "#Tunisia Hackers";<br />
tb9_messages[2] = "..................";<br />
tb9_messages[3] = "|";<br />
tb9_messages[4] = "<========== | ==========>";<br />
tb9_messages[5] = " <===== | =====> ";<br />
tb9_rptType = 'infinite';<br />
tb9_rptNbr = 5;<br />
tb9_speed = 75;<br />
tb9_delay = 2000;<br />
var tb9_counter=1;<br />
var tb9_currMsg=0;<br />
var tb9_timerID = null<br />
var tb9_bannerRunning = false<br />
var tb9_state = ""<br />
tb9_clearState()<br />
function tb9_stopBanner() { <br />
if (tb9_bannerRunning) <br />
clearTimeout(tb9_timerID) <br />
tb9_timerRunning = false<br />
}<br />
function tb9_startBanner() { <br />
tb9_stopBanner() <br />
tb9_showBanner()<br />
}<br />
function tb9_clearState() { <br />
tb9_state = "" <br />
for (var i = 0; i < tb9_messages[tb9_currMsg].length; ++i) { <br />
tb9_state += "0" <br />
}<br />
}<br />
function tb9_showBanner() { <br />
if (tb9_getString()) { <br />
tb9_currMsg++ <br />
if (tb9_messages.length <= tb9_currMsg) { <br />
if ((tb9_rptType == 'finite') && (tb9_counter==tb9_rptNbr)){<br />
tb9_stopBanner();<br />
return;<br />
}<br />
tb9_counter++;<br />
tb9_currMsg=0;<br />
}<br />
tb9_clearState() <br />
tb9_timerID = setTimeout("tb9_showBanner()", tb9_delay) <br />
} <br />
else { <br />
var tb9_str = "" <br />
for (var j = 0; j < tb9_state.length; ++j) { <br />
tb9_str += (tb9_state.charAt(j) == "1") ? tb9_messages[tb9_currMsg].charAt(j) : "___" <br />
} <br />
document.title = tb9_str <br />
tb9_timerID = setTimeout("tb9_showBanner()", tb9_speed) <br />
}<br />
}<br />
function tb9_getString() { <br />
var full = true <br />
for (var j = 0; j < tb9_state.length; ++j) { <br />
if (tb9_state.charAt(j) == 0) <br />
full = false <br />
} <br />
if (full) return true <br />
while (1) { <br />
var num = tb9_getRandom(tb9_messages[tb9_currMsg].length) <br />
if (tb9_state.charAt(num) == "0") <br />
break<br />
} <br />
tb9_state = tb9_state.substring(0, num) + "1" + tb9_state.substring(num + 1, tb9_state.length) <br />
return false <div class="clear">
</script>
