I've seen this before on a couple of shared web hosts. There was previously a multi-language (javascript and php) worm which did the rounds through a few things

I've seen this before on a couple of shared web hosts. There was previously a multi-language (javascript and php) worm which did the rounds through a few things a while ago. It put me right off using shared hosting.