New Customer Reg. & Product Issue

[crockwd]

Hi, I recently volunteered to maintain a site that includes a ZenCart store. I'm a total Newbie to ZenCart and am not very experienced with php either but am trying to learn.... I went through a few recent pages of threads, but any specific help would be appreciated on the issues this store is having. Since I didn't build it, I do not know what changes have been made; I believe but can't be certain that the issues arose within the last six months?

The store site, excluding the spaces is at w w w . l l e w e l l i n s e t t e r c l u b . c o m / s t o r e

Zen Cart Version 1.3.7
PHP Version: 5.2.9 (Zend: 2.2.0)
HTTP Server: Apache

Aside from the security breach that now has pharmaceutical spam links plugged into the login page and into order confirmation emails , the problem I'm inquiring about is about the customer registration and product ordering.

First, there is no "Create an Account" or "New Customer" link or form, so people new to the site cannot order anything since they can't create an account. Where/how do I fix this?

Second, where do I find the add-on for the mod of ordering anonymously without having to register first? Are there any disadvantages to activating such a option?

Third, I edited a product (the 2010 Puppy Calendar) to change it from an old calendar: I only updated the title, changed the photo, changed the price, and edited the description; I left the products model label alone and everything else was unchanged. Should there be any reason that this would have messed up the product info/ordering capabilities? Should I have editted any other section of the admin stuff to take this change into account?

I added another product (Clearance 2009 Puppy Calendar) and just filled in the form provided in ZenCart; it seemed straightforward.... I was recently informed that three people had tried to order the 2010 calendar and weren't able to but I'm thinking it had to do with the customer registration issue unless I'm missing something....

I just noticed that the spam links are most likely where the registration/new account form should have been. Is it possible that the hackers replaced the form with its links?

Alright, I suppose I'd better get some of those questions answered first before I keep rattling on... Thank you very much for any insight you can provide!

Chelsea

PS. I did install the 20090619 security patch yesterday but learned that I'll have to clean up the mess the hackers have already left... in all my "spare" time