Malicious things that an ex-admin could have done

[Stachel]

2 questions, 1 general, 1 specific:


What are malicious things that an ex-admin could have done who left my board on un-friendly terms?


Is it possible to create a user account that has more privileges than normal users but wouldn't show up as being a Moderator, SuperMod, or Admin?


Stachel

[Floris]

He could setup access masks to a normal user so that user could view the private forums.

You could search for the ex-admin IP and then 'find more users with this ip' and see if he matches other members, to trace him back.

[Stachel]

Thanks Floris, I checked and didn't see any special access masks on the troll account.

For the 2'nd thing - "Find more IPs.." that's not working correctly (see other thread) or I'm not using the correct syntax.

Stachel

[Andy Huang]

1. If you remove his administrative access, and remove his .htaccess for /admincp and /modcp, you can be pretty sure that he will not be able to cause any harm besides random barking on your boards as a member.

2. You can do so by creating a secondary usergroup for the person, grant it the level of access you want, and viola