update site.

is there anybody out there who has successfully upgrade his/her MODX website?

We have tried it serveral times, but we still have 2.3.1 and we are hacked on regular base.

our procedure:

download modx-2.6.5-pl.zip & unzip.
rsync it to our Plesk webhost. ( according: https://docs.bitnami.com/installer/apps/modx/administration/upgrade/ )
go to http://oursite/setup.
on this stage we get an error in modifiercompiler.escape.php, this is solved by editing line 35 and 39
After this we can succesfull walk through the upgrade menu.

But checking /httpdocs/core/docs/version.inc.php still shows:

$v= array ();
$v['version']= '2'; // Current version.
$v['major_version']= '3'; // Current major version.
$v['minor_version']= '1'; // Current minor version.
$v['patch_level']= 'pl'; // Current patch level.
$v['code_name']= 'Revolution'; // Current codename.
$v['distro']= '@traditional@';

Please help anybody???

Hi tanyastawicki,

Whilst it's tempting to go straight for the latest MODx install, it's advised not to jump major versions. Instead, apply a step-by-step approach.

If you were previsouly running 2.3.1, try upgrading as follows:

2.3.1 -> 2.4.0
2.4.0 -> 2.5.0
2.5.0 -> 2.6.0
2.6.0 -> 2.6.5

Within the last few months, I've fixed 4 MODx websites/servers that were hacked, so I understand your pain. Some were older than 2.3.1. It's important to do a proper server cleanup before attempting a fresh install. Whilst older versions of MODx are vunerable, there are other things that can contribute to the vunerabilities, including things like PHPMailer.

Take a look at this link. It references a Drupal attack, but can be applied to MODx installs too:

http://rankinstudio.com/Drupal_ico_index_hack

Once you've got your website working again, it may be worth installing this Extra by BobRay:

Search 'UpgradeMODX' within your MODx Installer, or visit:

https://github.com/BobRay/UpgradeMODX

Jim

[ed. note: jimf3000 last edited this post 5 years, 6 months ago.]

Don't skip 2.6.0.

You should always install the x.x.0 versions because that's often where changes to the DB take place.

Quote from: BobRay at Oct 06, 2018, 03:56 AM

Don't skip 2.6.0.

You should always install the x.x.0 versions because that's often where changes to the DB take place.

Thank you. Yes, 2.6.0 should have been included. I'll update my original post.