Hello all, I just found out that all the users that sign up to my site are being provided admin access automatically. On my friend's head's up, I signed up using another id on my own forum and was scared to hell by the permissions i were having by default( as a newly registered user) .
1) I have searched all over the web, found no similar issues.
2) I had this site imported from old phpBB.
3) Users can do literally anything including deleting my(admin) account. I tried to close the forums for all registered users temporarily by disabling "Signin" under allow, but that didnt work either.
Somebody please help me. This is a worst nightmare.
0 • •