The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Major Security Issue on my forum

4 posters

Go down

In progress Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 10:46 pm

There's been a security issue on my forum. I added a new admin to the Admin group and because of what was now a small misunderstanding, I removed the user. However, he later logged back onto the forum and immieately became an admin again. We tried to figure out how it happened and found out that when the confirm password to log into the AP is turned on, this user can become an admin again even if I remove him. Thankfully, I want the user to be an admin, but if this happens with another user, there's nothing I can do except turn off the confirm password thing which I want to keep on for security reasons. How can this be fixed?

Thanks!

PS- I have ads turned to guests only, and a staff member before logging in told me that he saw a pornographic advertisment. I logged out and saw it too. Is there a way to remove the ad or have ads turned off for guests too?
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario March 4th 2012, 10:53 pm

Hello,

Did you remove the user from the right group? Unless someone knows your password to your account, its not possible to set an account to admin.

Also if you want ad's remove you need to buy credits in the misc tab and if you find something that is porn ad, you can send a staff member a link to the ad, so it can be blocked, but without that url, no much can be done.
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 10:55 pm

I removed the user from the admin group, but when he logged out and back in, he was an admin again.

If the ad comes up again I'll PM the link to you.

EDIT: You don't want to recieve PMs it says, so who should I send it to?
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario March 4th 2012, 11:03 pm

You can PM any of my other staff members. They has the power to pass it to Leeloo who can do something about it.
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 11:04 pm

Ok, thanks. Is there anything I can do about the Admin thing?
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by MrMario March 4th 2012, 11:06 pm

Where are you using the user from?
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by SLGray March 4th 2012, 11:07 pm

When you removed this member from the admin group, did you remove him in the administration panel or on the forum?


Major Security Issue on my forum Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51463
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 11:08 pm

http://universalmln.forumotion.com/forum

The user is FatCatNine.

@slg- I tried it both ways.
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 11:35 pm

We can demonstrate the problem for you if needed. There's an account that you guys can use to see it for yourselves.
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by SLGray March 4th 2012, 11:38 pm

Please don't double/triple post. Your post need to be separated by 24 hours before bumping, replying or adding more information. Please use the edit button instead!





Major Security Issue on my forum Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51463
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 11:49 pm

Oh. Sorry!

Thanks for your help though! Wink
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Juggalo™Killa March 4th 2012, 11:52 pm

Maybe there is a hidden admin group the user made, he could of hidden the real admin group and made a fake one to fool you so he is always an administrator.
Juggalo™Killa
Juggalo™Killa
Forumember

Posts : 67
Reputation : 4
Language : english

http://psvmods.net

Back to top Go down

In progress Re: Major Security Issue on my forum

Post by Tennisdude March 4th 2012, 11:53 pm

I checked, and that's not the case.
avatar
Tennisdude
Forumember

Male Posts : 66
Reputation : 1
Language : English

http://Universalmln.forumotion.com

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum