There was this question, and lot of people commenting about the general "headers already sent" stuff, when the question OP had, to my knowledge, clearly showed that he's been hacked and should wipe his/her site immediately. I added is as an answer but it seems to get lost within peoples comments about the general "headers already sent" responses.
What's the correct way to react? I would think OP should be notified immediately in a case like this. Or should he?