Admin Password Problem

Today I attempted to log into the main admin account on my forum but it said that the password was incorrect. I tried it continuously and I am positive that it was correct.

I then switched over to my personal admin account and checked the admin log and it says that someone on the main admin account made use of the "I forgot my password" feature. But the thing is (I used the IP to see who it was that did it), the person who attempted to get the password is NOT an administrator.

Why would the password be different if somebody requested a recovered password? Why would I not be able to log into the account just because a non-admin is trying to get into it?

Help!

That's a weird one. Did you receive an email for the forgotten password? The only thing I can think of is a security lock out, I'm not sure how long it lasts or even what the settings are (we have no control over that). Generally, for incorrect passwords its a 15 minute lockout.

If it isn't this I'd check these things:

capslock
numlock
sticky keys (on more than one occasion I've had extra letters from sticky keys)
a switch of keyboard language - american and british languages have symbols in different places.

If all that fails, you are going to have to recover the password https://help.forumotion.com/t93821-lost-founder-s-password

It could be a simple case of corruption.

coco moco wrote:That's a weird one. Did you receive an email for the forgotten password? The only thing I can think of is a security lock out, I'm not sure how long it lasts or even what the settings are (we have no control over that). Generally, for incorrect passwords its a 15 minute lockout.

If it isn't this I'd check these things:

capslock
numlock
sticky keys (on more than one occasion I've had extra letters from sticky keys)
a switch of keyboard language - american and british languages have symbols in different places.

If all that fails, you are going to have to recover the password https://help.forumotion.com/t93821-lost-founder-s-password

It could be a simple case of corruption.

Apparently the "forgotten password" was sent to a different admin email. I'm not sure how this happened because the email it was sent to was a different email than what the admin account signed up with.

Could they have changed their email address, whilst being an admin, or could someone else have done it? It all seems a little weird to me. Has access been restored now?

coco moco wrote:Could they have changed their email address, whilst being an admin, or could someone else have done it? It all seems a little weird to me. Has access been restored now?

I am not sure it is possible that they could have. First of all, I did not found the forum, but I was given control of it just months after it was made. We have had recent problems with some users trying to hack into the admin accounts, etc. but they were resolved. I believe that this attempt to change the password was part of that, but I hadn't noticed until today. The founder didn't want moderator powers anymore and as a result is not technically an admin, so it could not have been him. If that isn't enough to prove it, he is away on a vacation right now and one of his emails (but not the one he used to sign up with) is what the forgotten password was sent to. I don't understand why it would allow a forgotten password to be sent to an email that is not an admin email. I also don't get why I am unable to use the password to log in just because someone else "forgot the password."

The only reason I am concerned about it (I find the account useless 90% of the time) is that I am afraid it may fall into the wrong hands. I'd just like to recover it somehow and perhaps just change the email to mine and change the password to something unmemorizable.

If you have founders powers you should be able to change the email to one of yours, then follow the forgotten password procedure. You will then get the email sent to your account. (you will need to speak to the person, but it doesn't sound like this will be an issue, it's generally very bad practice for a whole host of reasons).

It's slightly harder if the account you can't get access to has all the founders powers, but from what you are saying it doesn't.

The only thing I can think of for the reason behind the lock out, is security or corruption. As for the email account - are you 100% certain it wasn't the original sign-up email and was changed at another time (not recently) to something else. I've heard of emails still going to the original email address, even after a change.

It tells me that only the founder can edit the founder's profile even if I am trying to swap emails. And I use the admin account fairly regularly and I have always known the email to be something different. (The founder used the same email to sign up his personal account and admin account.) The change had to be made sometime in July, probably in the last week.

I am alittle confused: Do you have the founder account or just an administrator account?

You are going to have to get in contact with the founder then and get him to sort out the password as a matter of urgency. I'm going to assume the password isn't working for him either so he will need to go the "lost founders password" link I posted above. I'd also ask about the change in email to get to the bottom of it.

I'm really not sure what else can be done without him helping, though.