| Author |
 Topic Search  Topic Options
|
ianturner 
Newbie
Joined: 18 July 2003
Status: Offline
Points: 6
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: HUGE SECURITY FLAW!! WARNING!!
Posted: 18 July 2003 at 5:48am |
Well,
Is it possible to delete the default account: administrator/letmein
i cant find it anywhere, this is serious!!!
|
 |
b_bonnett
Mod Builder Group
Joined: 16 April 2003
Location: New Zealand
Status: Offline
Points: 275
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 5:55am |
No, you just change the username and password through the Admin menu  .
At the top of the first page of the admin (i.e. http://www.yoursite.com/forum/admin/frame_set.asp) there is the following message:
For security it is highly recommended that you change the Admin Username and Password to stop others messing up your Forums!
(and a link to the appropriate page).
Blair
|
|
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 5:56am |
This is not a security problem at all!!!!!
The main admin account can not be deleted.
But if you took the time instead of posting a topic with a heading like this  you would find that you can change the username and password for this account in the admin section of the forum, which you should most certainly do.
|
|
|
|
b_bonnett
Mod Builder Group
Joined: 16 April 2003
Location: New Zealand
Status: Offline
Points: 275
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 6:00am |
Heh, just too fast a typer for you -boRg-. Remember never to duel with me   .
Blair
|
|
|
|
pam b
Groupie
Joined: 10 April 2003
Location: United Kingdom
Status: Offline
Points: 117
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 6:05am |
before we all go off on a hissy fit, i think he's saying he cant locate it? if its a new forum perhaps upload got screwed and admin login is corrupted?
Try re uploading!
|
|
regards,pam
|
|
b_bonnett
Mod Builder Group
Joined: 16 April 2003
Location: New Zealand
Status: Offline
Points: 275
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 6:11am |
Don't think so - he's saying he can't find how to delete it (can't because theres no such option). But anyway, if you can't see the link to change the username / password it won't be a database problem - it'll be some of the files in the /admin folder - try re-uploading them.
Blair
|
|
|
|
ianturner
Newbie
Joined: 18 July 2003
Status: Offline
Points: 6
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 6:18am |
no it still allows me to log in with administrator/let me in, even when i changed the name and password. ??? 
|
|
b_bonnett
Mod Builder Group
Joined: 16 April 2003
Location: New Zealand
Status: Offline
Points: 275
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 July 2003 at 6:28am |
You should have said so earlier .
Well, its not a bug in the forum - I can't log in to these forums with the Administrator username, or onto my forums. Can you log in using the renamed account? After you have logged in with the Administrator / letmein, what username does it show in the Active Users? What about if / when you are using the renamed account - what username then?
Blair
|
|
|
|
