question about /includes/functions.php

[Halo2Forum.com]

is it ok to change the chmod of functions.php to read only? because we have the iframe hack going on the server right now and it's targeting that file.

*edit* nevermind, iframe keeps coming back regardless

[Andy Huang]

There may be other script on your server that is not secure which allowed the malicious person to inject iframe into your template via database directly. Please check your database's style table (don't forget table prefix if you're using it) and see if you can find the iframe; remove it from there.