
Originally Posted by
kuroi
Wow. Well that was always a possibility, which is why I suggested looking there, but it's so unprofessional that I didn't actually think that it would be the problem.
I can't be certain, but it sounds as though they have delivered you site using the old version, but instead of upgrading it, or even just telling you (though could argue that they started on the old version so an upgrade would be extra), they've gone out of their way to hide this. And by obscuring the version and not doing the security patches, they've left you exposed.
The good news is that, unless they've really hacked the core code about, an upgrade to 1.3.9 is fairly straightforward, and you've already demonstrated the skills needed to do it.