The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

Major Security Issue on my forum

View previous topic View next topic Go down

In progress Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 10:46 pm

There's been a security issue on my forum. I added a new admin to the Admin group and because of what was now a small misunderstanding, I removed the user. However, he later logged back onto the forum and immieately became an admin again. We tried to figure out how it happened and found out that when the confirm password to log into the AP is turned on, this user can become an admin again even if I remove him. Thankfully, I want the user to be an admin, but if this happens with another user, there's nothing I can do except turn off the confirm password thing which I want to keep on for security reasons. How can this be fixed?

Thanks!

PS- I have ads turned to guests only, and a staff member before logging in told me that he saw a pornographic advertisment. I logged out and saw it too. Is there a way to remove the ad or have ads turned off for guests too?

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario on March 4th 2012, 10:53 pm

Hello,

Did you remove the user from the right group? Unless someone knows your password to your account, its not possible to set an account to admin.

Also if you want ad's remove you need to buy credits in the misc tab and if you find something that is porn ad, you can send a staff member a link to the ad, so it can be blocked, but without that url, no much can be done.

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 10:55 pm

I removed the user from the admin group, but when he logged out and back in, he was an admin again.

If the ad comes up again I'll PM the link to you.

EDIT: You don't want to recieve PMs it says, so who should I send it to?

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario on March 4th 2012, 11:03 pm

You can PM any of my other staff members. They has the power to pass it to Leeloo who can do something about it.

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 11:04 pm

Ok, thanks. Is there anything I can do about the Admin thing?

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario on March 4th 2012, 11:06 pm

Where are you using the user from?

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by SLGray on March 4th 2012, 11:07 pm

When you removed this member from the admin group, did you remove him in the administration panel or on the forum?


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36735
Reputation : 2447
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 11:08 pm

http://universalmln.forumotion.com/forum

The user is FatCatNine.

@slg- I tried it both ways.

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 11:35 pm

We can demonstrate the problem for you if needed. There's an account that you guys can use to see it for yourselves.

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by SLGray on March 4th 2012, 11:38 pm

Please don't double/triple post. Your post need to be separated by 24 hours before bumping, replying or adding more information. Please use the edit button instead!





When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36735
Reputation : 2447
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 11:49 pm

Oh. Sorry!

Thanks for your help though! Wink

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Juggalo™Killa on March 4th 2012, 11:52 pm

Maybe there is a hidden admin group the user made, he could of hidden the real admin group and made a fake one to fool you so he is always an administrator.

Juggalo™Killa
Forumember

Posts : 67
Reputation : 4
Language : english

http://psvmods.net

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude on March 4th 2012, 11:53 pm

I checked, and that's not the case.

Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum