Well, since 1.4.6 there have been two security releases... are you subscribed to the MyBB mailing list??
I dont think i am, where can i signup for that?
Right. Well it's highly likely that you have an account that has admin CP access that you have not authorised. This is due to an exploit that was patched in 1.4.8.
Please check for unwanted admins and delete them.
Thanks, you're right, a user with the IP 79.140.81.83 had admin.
(2009-06-29, 04:13 PM)Blindkilla Wrote: [ -> ]I dont think i am, where can i signup for that?
http://www.mybboard.net/mailing-list
Wouldn't have made a difference this time though because there hasn't been an email sent out for the last 3 security releases, but, for the next release, if it is actually sent out, you'll know about it sooner.
Could my database information have been compromised as well? (database login information).
Not unless they had FTP access.
Alright, good good.
Thanks Ryan and Matt for the help and information, greatly appreciated
I guess, it is also recommended to rename the admin-directory and protect it via .htaccess.