Hacked?

I woke up this morning to find a new registered member, but neither Admins on my forum validated this person.
How could this happen.
The forum is invite only and we keep it real tight.

What happened?

Hello,
For this have you checked your Forum Security Log to see if either admins activated them and forgot about it? Or if the settings was changed for invite only to where the member can validate their account by their email?

Regards,
Jadster

Jadster wrote:Hello,
For this have you checked your Forum Security Log to see if either admins activated them and forgot about it? Or if the settings was changed for invite only to where the member can validate their account by their email?

Regards,
Jadster

There is no record of him being activated only my deleting him.
Who can access a script of this? It has to be somewhere.

This is important, folks. Need to trace this and nail it down.

Hello,

Could you check to see if you have Topic It' registrations set to 'auto activate'? To check this go to: ACP-->Mobile App--->'Automatically activates Topic'it Connect users: make sure this is ticked to no and save.

It is likely they registered through Topic It' and this feature auto activated them.

-Brandon

Thank you---I hope that is the cause. It was toggled 'yes'.
Thanks a lot.

Your welcome, always glad to help.

Would you like me to leave this open for a couple days to make sure or would like me to consider this solved?

Let's leave it open--thank you.
is there any way a body could hack their way in?

Hello and thank you for getting on to us about this.

I think i know what the problem is and i don't think your forum or you admin account was hacked.

I think your new member was using a topic-it app system to make the account on your forum.

If this is the case then you need to take a look at some settings on your ACP.

Please head on to the following settings:

ACP >> Modules Tab >>  Topic'it >> configuration >>

Yes--thank you---I have just done this.

is this now solved for you ??

If yes then please press the mark solved button found at the top of this topic / thread and we will close the thread and move it.

Thank you and have a great weekend from all of us at forumotion English support team.

It was suggested we leave it open a while to make sure this was the cause.

Settertude wrote:Let's leave it open--thank you.
is there any way a body could hack their way in?

Extremely unlikely, it is very difficult to hack via brute force. I think someone would much rather hack an existing user's password then attempt to hack into the entire database just to make an account. Even that is alot of work to go through just to make an account on a forum.

I am 99% sure it was someone using the app though, because we have had other cases of this in the last year and it is always solved by turning the feature off so.

Settertude wrote:Let's leave it open--thank you.
is there any way a body could hack their way in?

The only way is if you give your founders email address out in public or to some one you don't know, My advice is never give that address out to any one and only use a email never been used anywhere (keep just one email for your forum and use others as a public email )

Never give your founders or admins info out to any one not even if you think you can trust them it's never safe.

Some times staff will ask you for a test account here at the support forum this is never a founders account unless we really need it and even then you have the right to say no at any time.

 Helpful tips and trick's:
https://help.forumotion.com/t156280-how-to-make-a-test-account-for-your-forum?highlight=test+account

Ok--then. I will trust this and mark it solved.
I very much appreciate the quick response.
The forum is doing really well.
Almost 21K posts in 2 months!

It that case--I will get a new email account and change the 'Founder's' to the new one as you suggest.

Your welcome have a great weekend.

Problem solved & topic archived. Please read our forum rules: ESF General Rules