new registered member and is already administrator.

[14DH01]

hello,​

Last night, browsing the lists of members, I realized that a new registered member, was already a director!​

 

[Brogan]

Administrators can only be set in the ACP.

 

[14DH01]

I looked in the log no one has put this user administrator.​

​

How strange, I hope this is not a security bug

​

 

[borbole]

I looked in the log no one has put this user administrator.​

​

How strange, I hope this is not a security bug

​

That is very weird. There is no known security issue in xenforo that will allow that. Have you installed any mods lately or made some other kind of modification to your forum?

 

[Sadik B]

What he probably means is that someone registered with the username "administrator".

 

[Brogan]

Options -> User Registration -> Disallowed Text in User Names

 

[14DH01]

There's a beginning has everything​

​

I was only three add-on and added style.​

Nothing has been change these latter times.​

​

Looking at the list of new registered, he was in the Administrators group.​

It is the red color, which warned me of this strange position.​

​

I also ask the question, in my private forum and sent a private message to the user to know how he did it​

 

[14DH01]

What he probably means is that someone registered with the username "administrator".

his name is "thierry55110"​

If such a nickname "administrator in red" in the "mood state", it would still be there right?​

​

i'm disable :​

admin​

aministrateur​

administrator​

moderateur​

moderator​

etc​

This is from the beginning

It is in the red color of my group who raise the alarm.
Administrator => is the admin group in red I saw it in the "card view member"

obviously I returned as a "Member":

it is registered since April 20

user: "test"
password: "test"
is this account there .
http://cibiforum.org/members/thierry55110.1292/ .
I can provide you with an admin account if you want to see the log administrator

 

[14DH01]

I think I found ​

I received a paypal and this member is placed automatically in the admin group.​

I do not know how to find the paypal link and I have not quite seen the list of groups.​

​

sorry for disturbing atmosphere .​

problem solved

​

 

[Jeremy]

I think I found
I received a paypal and this member is placed automatically in the admin group.
I do not know how to find the paypal link and I have not quite seen the list of groups.
View attachment 45346
sorry for disturbing atmosphere .
problem solved

If its PayPal related to purchasing an upgrade, I would check your settings for any paid upgrades you've defined. But as Brogan said above, you can only add administrators / moderators through the ACP and they won't have complete access to your site except as defined in Usergroup Permissions.

 

[14DH01]

I send you this in MP