Hi there i just recieved an email from [email protected] the email is an advertisement from pitchran.com (spammers site do not go there) My question is how are they sending an email from my site when they do not have access to the backend ? any help would be greatly appreciated.

I am running 1.2.4.1 db patched to 1.2.4

and yes im updating on a test server as i type. Is this the issue and is there a quick fix to prevent this till i can role the new site out?

regards.