From the server-side infection to the drive-by download on php.net

blog.kapravelos.com