Site hacked

[astdirect]

Hi.

I awoke this morning to a very unusual order and payment from paypal for one item. The order was for an item which should have been £2.10 with £3.99 postage but somehow it had went through as 0.01 item and 0.01 postage. The buyer was from India.

Logged into paypal thinking it was a spoof email but the 0.02 had actually been paid !!

So tried to access admin to check order and it wouldn't let me. So, i used forgot password feature and got new password sent to my address, but that didnt work either.

PLEASE HELP i am now locked out of admin and no idea how this person got in to order stuff and change pricing for one order. The price of item in shop is still £2.10 from front end.

url is uniquefancydress.com

[astdirect]

I should clear up. When i used "forgotten password" it DID send me a new password, but he password didn't work.

[astdirect]

When i try to login to admin it says :

There is 1 error
e-mail is empty

[Sabmit]

Do you have access to your SQL database ? (is it a prestabox website ?)

[astdirect]

Yes i have access. I dont know what a prestabox website is so that probably means no to taht question. Its version 1.2.0.5

[noesac]

Hi there, there were some important security updates released with 1.3.1, there were instructions somewhere on the site to retrofit this into old sites. Have you done this?