• My 1.5.2 site was hacked via a brute force FTP intrusion, deleting my whole site, files, email settings and all. When I got my files restored, I doubled the size of my password and learned there was a way to hack just my 1.5.2 blog. I’ve got my database back but the host hasn’t restored the blog and doesn’t provide phone support to enable me to choreograph a quick re-install of 1.5.2, disable plugins, upload 2.0.2, run upgrade, re-enable plugins sequence.

    I’ve been waiting for days for my web host to work this out with me.

    How could I run the 2.0.2 upgrade “offline” without temporarily re-exposing the site to being hacked using the 1.5.2 exploit again if I can’t get into the 1.5.2 admin panel to disable the old plugins?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Firstly backup your database.

    My guide may help you get the 1.5.x files and access your board.

    https://ajaydsouza.wordpress.com/2006/03/15/a-picture-guide-to-securing-your-wordpress-15x-blog/

    Thread Starter aaron1728

    (@aaron1728)

    1) I want to upgrade.
    2) I have FTP access already.
    3) The upgrade instructions on the CODEX say to TURN OFF the active plugins before the upgrade.
    4) Your guide doesn’t discuss how to deactivate the 1.5.2 plugins.

    I’m just afraid of 1) installing 1.5.2 on top of itself (many of the 1.5.2 files are still there) or 2) messing things up by installing 2.0.2 on a WP site where the plugins are not off as recommended in the CODEX.

    The plugins should be off if you want to upgrade to 2.0.2 and your only option is to deactivate them one by one before the upgrade.

    My guide was to upgrade your version of 1.5.x to the latest secure version of 1.5.x
    1.5.2 to 1.5.3- should not cause any problem as I have done it myself.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘1.5.2 to 2.0.2 w/o disabling old plugins — will it work?’ is closed to new replies.