Urgent: Forum security compromised or serious bug?!

[neukrotiva]

We're having some problems with usergroups and forum access rights.
Users are randomly jumping from group to group (full with group colour and group access rights) and some users are even getting administrative rights.

The problem manifested on multiple occasions and causes serious concern.
We even disabled the automated usergroups management but to no avail.

Can you please investigate what could be the problem?
We're using phpBB2 and our forum address is http://www.crofriends.com (it's Croatian forum)

[Darren1]

Hello,

Indeed this does appear to be a serious bug;

Can you inform us of how long this has been on going for?
Also, are the members "jumping" into "hidden" groups, or just "open" or "closed" groups?

[neukrotiva]

Group closed. This happens 3 days.It is very serious problem.

[Sanket]

neukrotiva, by any chance did you activate a new group with the auto subscribe feature based on number of posts?

[neukrotiva]

No, I do not use the automatic group.

[Sanket]

One more user is facing a somewhat similar problem, but it happened when a autogroup membership was turned on to check.

As off now, what i can confirm is that when a auto group membership is activated for a group the users in the admin group except the founder get demoted to this group.

Regarding to this problem, i have asked typlo whether its supposed to be like that? He will reply only tomorrow, since its a holiday today.

[neukrotiva]

OK, I hope you will help me, someone we can delete all theme
and settings because the forum got my license.

[Sanket]

Can you provide me more information as to what all happens, point by point.

[neukrotiva]

Just like that the 3 users on the forum got all my admin permissions and access to the admin panel and hidden subforums for moderators.
I wrote them for a moment had banirat that we would not do harm to the forum.
Fortunately I was online in the forum when the problem occurred, because I was pristuna could get to big problems.
I do not use the new option to update the user enters the group by the number of posts, and each group is closed
But they still went into it and have access to everything. This happens 3 days already.

[Sanket]

neukrotiva, I will move this thread to need of technician, & also bring this matter to the attention of Typlo.

Moved to need of technician

[Shadow]

Hello,

I've listed your issue for the techs, and they'll be checking them out quickly.

Sorry for the inconvenience.

[netsniper]

I have the a similar problem which Typlo is also looking into for me keep your fingers crossed

Thank you

[netsniper]

This problem I had seem to be ok now thank Typlo

[Sanket]

neukrotiva, is it solved for you as well?

[neukrotiva]

Now it's all good. Thank you very much Sanket and Typlo.

Can I put a new update to be included in the group by the number of posts without fear?

[Sanket]

Yes i think so.

[netsniper]

I have and it all seems to be working fine

Good Luck

[Steph]

Disregard... nevermind.

[Robbie Mate]

check who your administrators are, check your admin log.