At least this explains what I've been seeing suddenly in site audits for non-converted sites.

There are two instances of AWStats now, one for SSL and one for non. Bots are hitting on the SSL version.

And because of the way the server listens on the different ports, there is no redirect to the http version.

Seems to me that bots, including bad ones, can now run end around any security measures or firewalls set up for the http version, all without the site owner's knowledge.

And, should a host, that doesn't offer managed hosting services, take it upon themselves to convert sites? There's a LOT of things that can be adversely affected, like a podcast or RSS feed. Not to mention the changes that need to happen for 3rd party accounts, like Google. No instructions are given to the clients for that.

Plus, when they do convert just a database, is relying on a plugin the best method for mopping up the rest of the mixed media and other issues? I don't think so.

I understand about wanting to make things easier on non-techie site owners. But, I'm not sure this is the best way to do that.