So I was browsing around in my Admin panel and went to "Admin logs" I noticed that I could filter the user name. There is another user name in there besides mine. It's a user that has one post on our forums. When I filter activity by this user name I am seeing stuff poster below. This user is not an Admin and only I am. They have never been. Should I be worried about this?
If you don't know who that user is, you should ban their account immediately and remove their administrator permissions.
Though, it's worth noting that what they're doing is actually not malicious. It seems they are replacing certain items of text in posts. This is legitimately used to convert old BB code tags from old software or raw HTML in posts from old software.
Nope never. I am the only Admin and have always been. I have no moderators either. Just me, I even ran the analyzer on their permissions and they are just standard user no moderator privileges or admin privileges. I converted from IPB awhile back. But this was before this member signed up.
No there is only one thread with their post. It was just text and never had any media posted in the whole thread. When I ran the content replace was right after IPB and it was probable 2 months solid before this user signed up. The thread is listed below with this users only post:
I also verified the IP of the admin changes to the user and they are different even though it shows up as their name that did it? But I removed the content replace tool after i moved over from IPB. I even just went back in and checked and I have no add ons.