Marks & Spencer (M&S) says it has stopped taking online orders as the company struggles to recover from a cyber attack.