Yes groovicus you are absolutely correct.
I develope websites and one of my clients is a builder that deals with hundreds of Realtors in the Orlando area. There is a bidding war going on over property in the Disney area of which my builder has lots for sale.

The person that hacked into my website (claiming to want to prove to the builder the lack of security and help her out) was actually wanting the contact forms (leads). My builder, doesn't want to anger this Realtor and lose business but she wants a secure website. I'm rather stuck in the middle not being given any information accept what I've mentioned above.

I do think, however, it souds as if these forms are in fact being saved to a text file and I'm going to be changing that.
Thank you all again for your help, this site is a wonderful resource....