I noticed that someone used such code in adress bar
w.php?css=/mdd/cc-none
file (page) name is w.php and someone added code ?css=/mdd/cc-none

So the question: what is ?css=/mdd/cc-none
hackers?