Two questions in one. A php file was recently introduced in the root directory of my Wordpress installation (a domain installation). It didn't disturb my website but was apparently using the domain address to propagate ads.
1) How can someone paste a file into my root directory? How to stop that from happening again?
2) The file contain quite exactly this code.