Hi,
I set my Registration Method to Administrator Activation.
But I just notice recently, it automatically activates those Awaiting Activation members.
Is my forum has been compromized?
Hmm, I just don't understand why someone with access to your Admin CP would activate users instead of just completely ruining the forum for you.
I suggest you change all your admin account's passwords to longer and safer ones. Be aware that there might be hidden admin accounts (where the display usergroup is an user, but the actual usergroup is an admin). If the hacker was accessing the Admin CP from an existing admin account, then supposedly he won't be able to login anymore. I also recommend reading the following tutorials for tips on how to secure your MyBB installation and what to do if you get hacked:
http://mattrogowski.co.uk/?p=314
http://community.mybb.com/thread-44977.html
Are you sure ./inc/settings.php is CHMOD to 666...?? As faviouz said, I doubt the most havoc a hacker would do is approve accounts for you.
Thanks. It's solved now.
It turned out one of my new Admins activated alll awaiting-activation members.
Thank you very much for the attentions, Guys!