A security setting is randomly set back to 'yes' when i saved it as 'no'

Hi Forumotion,

My forum : http://xbotserver.forumotion.com/

In order to allow a minority of members with certain names to register on my forum i changed the following security setting :

"Unauthorize subscriptions made with the most commonly used spam usernames." It's defaulted as 'yes'

I saved it to be 'no'

However at random times, this setting sets itself back to 'yes', despite my saves. That causes those few members to be unauthorized and not be able to login anymore.

Is there a way to set this permanently to no? Or do something with those few members permissions?


Thnx in advance!

Unzy

If the system sees accounts that could be suspicious, the settings are changed to prevent them from registering.  This also happens when there is not a lot of activity on the forum.  Are the registration options also changing?

Hi Admin,

As far as I know , no they havent changed. In order to be able for those members to login again, i have to register them myself, activate account again and then they can login and edit their own parameters. Then its just random when spamfilter is set back to 'yes' and i have to re-do all again

In the security administration that particular setting is also the only one that i edited. The rest is as default

So the accounts are being deleted?

Well, im not sure deleted, they are just nowhere to be found. Not in the member's list, not in inactive list and there's nothing in the 'last actions' list. They just disapeared. are they put in some vault? or in some Suspicious fodler? dunno

But I can use their exact names again, so yea on my forum it seems they are deleted then

Unzy

Do you have any other admins who could be changing it back?

-Brandon

Hi Brandon,
I am the only one with access to the administration panel

Grtz
Unzy

Do you do any forum restores?

hello @Unzy

Unzy wrote:...I am the only one with access to the administration panel...

no, this is not the case at all! apart from the founder, I note 8 other admins on this forum all are active and connect to the admin panel....

I have forum admins yes but they do not connect to the admin panel.

I am the one who registered, installed and configured the forum. Are you saying that whenever I make someone admin on the forum (I did that because we have a hidden forum section only visible for admins) they have access to my administration panel and can just delete the forum or mess with other users???


Thats a bigger security risk than someone trying to register with a spam name


i was under the impression i was the main admin

Unzy

Yes as it says in the admin group itself, anyone you put in that group has access to the admin panel and can connect admin panel and change stuff.

They can not delete the forum or access the forum templates since those are founder only, but they can access the option in question.

My advice to you would be to remove all the people from the admin group and never add anyone you dont trust to it. If you want to have a private section, just create a hidden group, add them to it and then make it so only admins and that group can access it. That way they cant make changes to the site.

-Brandon

I want you guys to thank you for making this clear to me, i had no idea!
Im gonna follow your instructions

Thank you

Unzy

No problem!

May we consider this solved?

mark as solved.

Problem solved & topic archived. Please read our forum rules: ESF General Rules