Site is hacked, now I need to hack my own password in - Help?

[Scatstroker]

I've had an old site hosted for quite sometime that has been a victim of the security flaws in the earlier versions. I'm assuming it's the same type of issue as before but essentially someone has logged into the admin page added their own log ins and removed my log ins. Previously when this happened I contacted my server host and we were able to address it from that end. Unfortunately my host is now unresponsive and seems to have fallen off the face of the earth which means I no longer have that option. The version is 1.3.0.2 and has been active since 2005/2006 so it's definitely an older install.

What I'd like to do is update the site to version 1.5 on a new server. I would like to download my current catalog and cart information before doing so as to not have to reload all my products. I can do this by logging into the admin and using the easy populate tab if I can get a log in back into my site. I had another site of the same vintage and was able to log into it, although there were about 20 new admins they hadn't deleted my log in but after seeing so many of them it seems this security flaw is quite common and easily exploited.

I can pretty easily prove the site is mine as the contact us information still comes to me. It also lists my phone number and address on the site so if you're concerned about the authenticity of this request you can verify I am in fact the owner.

Can anyone help or point me in the right direction?

Site is: www.buyafr.com, my main site is www. a d p e r f o r m a n c e.com (you'll see the similarities)


Thank you for any assistance!

[DrByte]

You can get your database contents by doing a backup as described here: http://www.zen-cart.com/content.php?...ith-phpmyadmin

You can get your site's PHP/image/etc files by using FTP to login and download to your PC.

[Scatstroker]

I should have added that ... the ftp log in doesn't work.

The server host was sold from someone who was a close friend in 2005 to someone who I don't even know if they're still in business (but the site works but I haven't been charged in 3+ years.) I have my log ins from 2005-2006 when I setup the site but they don't work now so I don't know if they've migrated the software, changed the log ins or what but I can't get in through ftp or I would have gone that route. I don't have access to the server host, the ftp or any of the back end, which is also why I'm changing the server host (which I do have access to the domain host, thank god.)

Thank you, but its difficult not having the server access on any level.