By sergeiy on

Hi,

I'm working on updating a website from 7.2.1 to the latest Drupal 7 release (7.53). I did a manual core update. Then ran update of modules and themes. Next step is updating the database, but it doesn't go through. The Drupal database update page is stuck on the "Overview" stage, and when I press "Continue" it just remains on the same page (the url changes, though). At the same time, I'm logged in as admin, and can view admin pages, but cannot complete any operation. I either get an "access denied" or a notification that the form is out of date (and changes made are not saved).

The site also lost its theme and non-English content does not show, but that's something I'll try to figure out myself first, once I get admin to work.

Any ideas what that could be? Possible solutions? (I'll also be on live chat with my hosting to see if they can do anything on their end, but I think that's beyond their ken).

Background: The site is being updated because of two recent hacks. User 1 was compromised (I couldn't delete it, but changed all login details). Additional users were created and deleted. Of course, all that was done before the update; can't edit anything or delete anyone now.

More background: I'm not a Drupal expert, and not a tech expert. I'm also not the person who built the site, but I'm the only one with enough technical understanding to do something that we have. So I might be a bit slow in understanding things that look trivial to you folks :-)

Thanks in advance to everyone!

⋅ Categories: Drupal 7.x

Comments

ressa’s picture

ressa commented

If your site was hacked, you need to restore it from backup.

sergeiy’s picture

sergeiy commented

The issue in question appeared after the site was ostensibly back to normal. But I'm not sure that backup restore really removed all the consequences of the hack. In any case, I restored from backup, then had a week of issues with the site gobbling up all my CPU quota for unclear reasons, then tried to update, and this is what happened.

ressa’s picture

ressa commented

You should probably restore the site, with only you having access to the site, update the web site, and only then allow external access. This way you avoid the site getting hacked while it's not updated. After Drupalgeddon, it was recommended to restore to a back-up if your web site wasn't updated within seven hours after the update notice.

sergeiy’s picture

sergeiy commented

I've updated core and modules, but it won't let me update the database, and the whole admin system is jammed in the process. There are five stages to the update process: Verify requirements, Overview, Review updates, Run updates, and Review log. I reached the 2nd stage, Overview, and there it stopped. Pressing "Continue" leads me to the same page (with a different token at the end of the url).

meanbeth’s picture

meanbeth commented

I'm having almost exactly the same problem. I've got a site running Drupal 7.7 (I know...) and am trying to update it to 7.59. I've been working on a clean local install of the site (not a hacked online site) before uploading to the live site. As sergeiy describes, I can't get past the "overview" page of the update.php workflow, my site has reverted to the default theme, no forms work for me... so I can't even clear cache or change the default theme, my site name has reverted to "Drupal" and the language install has reverted to English. I'm looking at a complete from-scratch rebuild if I can't get this working. Any ideas?