Dear Father Chris and the residents of RC Parish,

You've been hacked on at least two occasions. By me and by a malicious black-hat group.

Try to improve your security. You can do this in the following ways:

1. Have your website built by a competent web design company.

2. If budget doesn't allow, request the web design company (Pendle Design) look over your PHP code to make sure all database queries are properly sanitized. The task isn't a difficult one and shouldn't be beyond any programmer with a rudimentry knowledge of common web design practices. There's a link you can send him here: http://php.net/manual/en/security.database.sql-injection.php

3. Don't store passwords for your CMS in plaintext. Come on dude. MD5 isn't sufficent either. PHP comes with a facility to encrypt passwords using blowfish. Here's a guide for that too: http://php.net/manual/en/function.password-hash.php

Regards and peace,

A white-hat hacker.