Thread Rating:
  • 1 Vote(s) - 1 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Somebody made himself a moderator without permission
#1
I have a special category for paid members. But today somebody hacked my website and moved himself from registered members to vip members.
Quickly i banned him account&ip adress. Maybe there is a bug about groups. I didnt make him moderator. And users can't attend to moderator group.
I'm using mybb 1.6.8 version. What should i do ?
If you can use basic english to explain, i will thank you.
#2
Have you made sure that you didn't give either group permissons to make other members moderators (or access to the admincp) by accident?
#3
Nobody can access the control panel except me.
i have made these changes. (in screen capture)
i have deleted all moderators and changed their rights. they cant even see the forums right now.

[Image: Kullan_c_Grubu_D_zenle.png] [Image: Forumu_D_zenle.png]
#4
This user has been denied support. This user has been denied support.
Make sure its set like this on the VIP Group:
[Image: 64bc3b5ac69facb8aac7d1e93a4538c8.png?1342572569]
#5
@Justice why should i make that? Can you explain?
I made it.
#6
it does not make a difference for permissions, only the group they are shown as.

you just need to remember that MyBB is a "yes wins" permission system, so no matter how many "no" permissions are set for a user or group, it only takes one "yes" to enable a particular permission.
Lost interest, sold my sites, will browse here once in a while. It's been fun.
#7
I choose myBB because it's simple but...
Is myBB to easy for hackers? Should i buy vBulletin for more security?
#8
(2012-07-18, 02:45 AM)tarkin Wrote: I choose myBB because it's simple but...
Is myBB to easy for hackers? Should i buy vBulletin for more security?

Not at all. Security is a process, not a product.
No longer involved in the MyBB project.
#9
If anything, vB has more frequent security issues because of its install base. Frequent rogue plugins, every vuln goes public... that's vB.
PGP Key (Fingerprint: 23B6 F4C0 FE2D 45AA 61A0 1E86 DB87 09DC DD87 6E40)
#10
This user has been denied support. This user has been denied support.
(2012-07-18, 01:50 AM)tarkin Wrote: @Justice why should i make that? Can you explain?
I made it.

Because in the User CP in group memberships they can just click join group.


Forum Jump:


Users browsing this thread: 1 Guest(s)