I realized we had been hit by some bot which added a malicious line of base64-encoded PHP to the top of every single PHP file on the entire server. After unsuccessfully trying to rid myself of it by manually fixing every single file, I decided to delete the whole thing and set it up fresh. This means no more awesome custom theme that makes the message board look exactly like the rest of my site, sadly.
Back up and running now, though.
