Sorry, didn't mean to offend:-)
I don't think anyone here is / was offended. We're just saying that there are many avenues of security involved and that it may not all be related to the UBB code. As stated by a few members here, you need to really scour the logs and review current settings, etc. If you don't have access then you need someone that does have access to help out or you could easily be going through this again.
I just did one on a Windows Server 2000 and it turns out that whomever set it up did not use any good best practices and basically left it open. Luckily at least Server 2003 comes out of the box so to speak a lot more secure than 2000 did, but it too needs to be shored up if you're going to have it Internet facing.
