NOTE: I've moved this discussion out of the Hack Attempts area, as this isn't a hack problem, but rather a server configuration problem.
In looking at your Zen Cart files, I notice several things:
- In the PHP code headers you've replaced the Zen Cart and OsC copyrights in the store with your own. You've done similarly with the Admin footer and removed the Version link from the header. Isn't credit due? ... after all, you did get the software for free...
- You've installed a few addons, namely: Image Handler, Quick Orders, Dual Pricing, and a few others
- You are running v1.3.0.1 code with a v1.3.0 database
- Your admin/includes/configure.php was last edited 05/02/2006 and contains information different from your includes/configure.php with respect to database password. ... and the admin gives an error on connection.
- Your problem is occurring as a result of some conflict between how the Image Handler calls its files and your server configuration.
I have resolved #3 and #4 above.
I have disabled Image Handler in #5 above by renaming functions_bmz_image_handler.php to *.bak in both admin and catalog.
You'll need to work with your host to find the right resolution to the problem, largely based on server errorlogs which will show details of the problem when you rename the *.bak files to *.php.