stevesh:
Problem is version 1.3.8 is insecure and susceptible to hackers. Better to take a good look at the mods you're using and decide if you really need them all, then upgrade, adding only those mods that seem essential.
I was able to figure out how to make them log in to send a contact us email on my own:
In includes/modules/pages/contact_us/header_php.php
Where this code is:
} else {
$customer_email = NOT_LOGGED_IN_TEXT;
$customer_name = NOT_LOGGED_IN_TEXT;
Change it to this:
} else {
zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
Worked like a charm :D