Oh boy! That's a tough one.

Megan — Fri, 07 Jun 2013 13:40:45 +0000

I take it this is a custom built CMS? Firstly, that probably isn't necessary from the impression I'm getting. Something like Wordpress or Drupal or another off-the-shelf solution would have been a better route to go. That also would have ensured that spam protection is quick and easy to implement.

It sounds like this person isn't interested in keeping you happy as a client. What you need to do is find someone else to help you and get your site onto another server asap. Assuming you have access to your domain registration details, you could point the domain to a new server and set up a quick place holder with a message that the site will be back soon. Then get back to this developer and try to coerce him into giving you the files & associated database content for your site. Threaten legal action if necessary. Hopefully you have some documentation of previous correspondence with him (agreement to host the site on your behalf, payment for services, etc.)

Next time you're working with a developer, get a contract in writing, and some off-site back-ups. My partner and I are working with a client to set up some back-ups with a third party for this very reason.