best practices - administrator
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=25578
Printed Date: 03 April 2026 at 7:09pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: best practices - administrator
Posted By: billd3
Subject: best practices - administrator
Date Posted: 09 April 2008 at 4:00pm
As a security person for a gov't agency, I guess I know a few things are a given:
Change the name of the administrator, as if they don't have the correct name, then they have to guess a name as well as the password. If the name is administrator, they have half of what they need to get in. They only need the password.
So change the administrator name.
However, I'd like some advice on the forums specifically....
If for some reason the administrator account becomes corrupted, then you are hosed - can't get in as administrator. Is it ok to have a second ID that IS an administrator?
How is that best done.
So often, I find I need to make a change or a tweak that only THE administrator can do, or someone with admin rights.
Can I make myself a member of the admin group - but still be a moderator? I function as both, I'm the administrator, technically, although I log out as me, and in as the admin, then out as admin, then back in as me. Sort of clumsy......
Deleting a member, for example - if I see a "spammer" has signed up, you can tell from their web address and sometimes the email, or even their ID - typical members of a CAR forum don't show their personal web site as www.freeporn.com for example...... We take those out instantly. But only the or an admin can....
Is there a better way?
Thoughts?
-------------
BillD
http://theamcpages.com
http://theamcforum.com
|
Replies:
Posted By: WebWiz-Bruce
Date Posted: 09 April 2008 at 4:14pm
I always say it's best to have just 1 admin account and if you are the forum admin use that as your account.
The admin account has full rights over all forums, including moderator rights, and more.
I've never heard of the admin account becoming corrupted, as it's simply a user in the database. The only thing that does occasionally happen is that people forget the password for the admin account, if you did that you would need to edit the database, but the following article describes how to reset the password in the database:-
http://www.webwiz.net/webwizforums/kb/admin_password_reset.asp -
http://www.webwiz.net/webwizforums/kb/admin_password_reset.asp
The main thing to make sure is that the admin account has a strong alpha numerical password and that you change it.
Moderators do have the right to edit member profiles so can remove dodgy homepages from user accounts and can also suspend, but not delete, accounts.
-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
|