a friend of mine said that he has a weird problem on his forum. a user account keep changing to admin account. he said this hacker some how becomes admin over and over again after he bans his account, etc.
i decided to take a look at the control panel log. and i noticed a trend. every time this account turns into admin, the first thing i see him doing is this:
1339 Am.Two.X.two 02:32, 13th Nov 2008 user.php viewjoinrequests 114.58.71.XXX
I've seen him become an admin 3 times after I remove him from admin and that's the first thing he executes.
i decided to take a look at the control panel log. and i noticed a trend. every time this account turns into admin, the first thing i see him doing is this:
1339 Am.Two.X.two 02:32, 13th Nov 2008 user.php viewjoinrequests 114.58.71.XXX
I've seen him become an admin 3 times after I remove him from admin and that's the first thing he executes.
Comment