In my opinion, it is not a concern, because: Your index.html precedes index.php, so it only runs when user types in <url>/index.php specifically. The JavaScript file has been removed from Google Code, which means the JavaScript won't load. I have tried accessing the JS file directly, and I got a 403 error. If you are still afraid, here's a link to how it looks like with a online screenshot. The whole index.php file do not seem to have any dangerous elements, except for the JS file. Only some psychedelic NyanCats with a YouTube background music. There's a link at the bottom, which leads to a list of hacked websites (I think?), which shows the websites hacked by "Lulz53c", in which Mr. hacker here claims to be a member. Of course, to be safe, clean up your index.php, or remove it totally if you don't need it.