hello,Last night, browsing the lists of members, I realized that a new registered member, was already a director!
I looked in the log no one has put this user administrator. How strange, I hope this is not a security bug
That is very weird. There is no known security issue in xenforo that will allow that. Have you installed any mods lately or made some other kind of modification to your forum?
There's a beginning has everything I was only three add-on and added style.Nothing has been change these latter times. Looking at the list of new registered, he was in the Administrators group.It is the red color, which warned me of this strange position. I also ask the question, in my private forum and sent a private message to the user to know how he did it
his name is "thierry55110"If such a nickname "administrator in red" in the "mood state", it would still be there right? i'm disable :adminaministrateuradministratormoderateurmoderatoretc This is from the beginning It is in the red color of my group who raise the alarm. Administrator => is the admin group in red I saw it in the "card view member" obviously I returned as a "Member": it is registered since April 20 user: "test" password: "test" is this account there . http://cibiforum.org/members/thierry55110.1292/ . I can provide you with an admin account if you want to see the log administrator
I think I found I received a paypal and this member is placed automatically in the admin group.I do not know how to find the paypal link and I have not quite seen the list of groups. sorry for disturbing atmosphere .problem solved
If its PayPal related to purchasing an upgrade, I would check your settings for any paid upgrades you've defined. But as Brogan said above, you can only add administrators / moderators through the ACP and they won't have complete access to your site except as defined in Usergroup Permissions.
