[Koha-devel] Major surprise - "automatic" upgrade

[Mason James]

On 2013-05-1, at 6:41 AM, Paul wrote:

> At 12:08 PM 4/30/2013 +1200, Chris Cormack wrote:
> [big snip]
>> But as Jared says it will not do this without you entering your
>> database user and password, and explicitly clicking to tell it to
>> upgrade. It will give you the page, but it won't upgrade until you
>> tell it.
>> 
>> The only automatic thing is it telling you you need to upgrade your database
> 
> Thanks Chris (and Jared, Marcel and Mason.) That was my understanding and it functioned as expected: it "upgraded the *database* from 3.8.5 to 3.8.10" the first time after I ran './cleanup_database.pl --zebraqueue -v' -- at this point I could not log in on the staff page as "paul" (or any other staff-user), had to log in as "koha" and got:
> Web installer › Step 3
> We are upgrading from Koha 3.08.05.000 to 3.08.10.000, you must update your database
> Update report :
>    Upgrade to 3.08.06.000 (3.8.6 release) done
>    / .. /
>    Upgrade to 3.08.10.000 (3.8.9 release) done
> Everything went OK, update done.
> Continue to log in to Koha
> 
> The "worrisome mystery" is why the "upgrading from Koha 3.08.05.000 to 3.08.10.000" took place at all!  Let me be clear, it took place without my knowledge and without my "informed" consent.


> 
> The mystery remains …



take a look at the timestamp of any file in the codebase,

it will give you, at least, the timestamp of when the 'upgrade' occurred

# ls -l  /usr/share/koha/intranet/cgi-bin/kohaversion.pl
-rw-r--r-- 1 root root 693 Mar 25 14:56 /usr/share/koha/intranet/cgi-bin/kohaversion.pl


fyi, if you genuinely believe that neither you (or your workmates) upgraded your Koha, i think you should consider your system hacked/rooted