Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 7, 2018 22:20:09 GMT -8
Forum URL: world-of-myrmecology.freeforums.netGood morning.I locked a thread a few hours ago which I believe was created by banned members who has rejoined under a new user name. This member was able to unlock the locked thread and then edit it's contents I have put the forum into maintenance mode as I am concerned that this new user might start editing other posts How was this normal user able to unlock the thread and more importantly how can this be prevented
|
|
Kami
Forum Cat
Posts: 40,064
Mini-Profile Theme: Kami's Mini-Profile
#f35f71
156500
0
Offline
Jul 24, 2021 11:48:29 GMT -8
Kami
40,064
July 2010
kamiyakaoru
Kami's Mini-Profile
|
Post by Kami on Feb 7, 2018 22:25:04 GMT -8
Basically if this is happening then this is cause for alarm — a regular member has zero moderation powers.
That said are you 100% certain they unlocked it? It will appear in your security log if so.
|
|
inherit
250246
0
Dec 5, 2017 3:25:20 GMT -8
/deleted/
epic
155
November 2017
deleted
|
Post by /deleted/ on Feb 7, 2018 22:52:34 GMT -8
Have you made sure this user isn't perhaps in a group but doesn't have it set as their display group or perhaps a group that's hidden with staff powers?
As stated above, regular members have no moderation powers, so there has to be a source of this member being able to do such things. Maybe another staff member could've made that member a staff member without asking you first.
I'm not sure how well it would work but have you also tried contacting said member as well?
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 7, 2018 23:09:25 GMT -8
Yes first thing I did after reading the post were he publicly said he unlocked the thread was to check the security log And yes it is in the log
He is just a basic member,Not in any group and shouldn't be able to moderate anything
This is a huge concern as I know of another proboard where is was also banned for disruptive behaviour.think he will also head that way
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 7, 2018 23:14:50 GMT -8
No staff member granted his any kind of access.the member causing the issue is unlikely to tell me how he did it as he is very very anti proboards.he wants me and my members to relocate to his us forum which is in his words far far superior to proboards
|
|
Kami
Forum Cat
Posts: 40,064
Mini-Profile Theme: Kami's Mini-Profile
#f35f71
156500
0
Offline
Jul 24, 2021 11:48:29 GMT -8
Kami
40,064
July 2010
kamiyakaoru
Kami's Mini-Profile
|
Post by Kami on Feb 7, 2018 23:26:29 GMT -8
The above advice for checking out their member group would be pertinent — and make sure you check it out via group / edit profile settings just in case they have it set to not display.
Double check to make sure you are not utilising a plug-in that allows members to lock their own threads (it’s called “Member Lock”). It may also be pertinent to disable all plugins in general, I recall a thread where a plugin accidentally allowed members to change their member group without having staff permission. I can’t remember what that plugin is though, so err on the side of caution.
If that is fruitless then you need to hang tight for a PB admin because this would require further investigation. In the interim I would also disable their account and switch on restricted registration so they can’t access the account they’ve been using + you can manually check registrations.
The PB admins will return during business tomorrow, from 9:00 AM - 5:00 PM pacific; for reference it is currently 11:28 PM pacific (so in about 9.5 hrs from this post).
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 7, 2018 23:38:48 GMT -8
I put the forum into maintenance mode soon as I read the post.i will double check the users privileges and post back here.could a warning be sent to the admin of ant hill world.he was banned from that forum as well.
|
|
Kami
Forum Cat
Posts: 40,064
Mini-Profile Theme: Kami's Mini-Profile
#f35f71
156500
0
Offline
Jul 24, 2021 11:48:29 GMT -8
Kami
40,064
July 2010
kamiyakaoru
Kami's Mini-Profile
|
Post by Kami on Feb 7, 2018 23:48:01 GMT -8
There is no one here that can do that, sorry. Also, PB admins do not reach out to forum owners in this fashion as a general rule; if they deem it necessary they might but I suspect that if this person has compromised PB’s system they’d be more interested in banning that person + fixing the loophole posthaste.
In all honesty I don’t think this is so much a breach of PB’s security as it is permissions gone awry through mistaken permissions, a faulty plugin, or even simply user error — while there’s always a chance this person has managed to compromise the security of PB as an entire service just to harass members of one or two communities, it’s unlikely. Not impossible, mind, just unlikely.
I don’t think you need to keep the forum in maintenance mode if you disable their account while this issue is investigated as well as turn on restricted registration. You may want to ban their IP as well to make it more of a hassle for them if they intend on re-registering.
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 7, 2018 23:53:00 GMT -8
Just rechecked and the member is not part of any group.the account is now disabled along with what I believe is a second account he created His ip was blocked first time around but proxy servers easily get around it ?.i also put on restricted registration soon as I read the post.just to be sure
|
|
Kami
Forum Cat
Posts: 40,064
Mini-Profile Theme: Kami's Mini-Profile
#f35f71
156500
0
Offline
Jul 24, 2021 11:48:29 GMT -8
Kami
40,064
July 2010
kamiyakaoru
Kami's Mini-Profile
|
Post by Kami on Feb 8, 2018 0:23:34 GMT -8
That’s all that can be done for now. Hopefully the admins have more answers in the morning. Good luck!
|
|
#eb7100
1480
0
1
May 17, 2024 6:14:38 GMT -8
Craig
208,894
September 2001
cmdynasty
|
Post by Craig on Feb 8, 2018 4:01:25 GMT -8
If you could leave a link to the thrwad, and the user in question, that will help the staff
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 8, 2018 4:19:46 GMT -8
|
|
#e61919
Support Staff
224482
0
1
May 17, 2024 16:18:36 GMT -8
Scott
23,384
August 2015
socalso
|
Post by Scott on Feb 8, 2018 8:41:54 GMT -8
@dayshaddow, how was that thread locked originally? Was it with the 'Disable Editing After Set Time' plugin? If so, plugins do not work for those on mobile, so that member could have just bypassed the plugin by accessing the forum via their phone.
Your security log shows that the user did edit their own post in that thread, but there is no log entry showing that they "unlocked" the thread. In fact the log shows the only lock on that thread was by you 5 hours after the last post in the thread.
|
|
Former Member
inherit
guest@proboards.com
232983
0
May 18, 2024 3:17:07 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Feb 8, 2018 11:00:22 GMT -8
The thread was locked by me and it was then unlocked and edited by the user.i shall go and get the print screens
|
|
#e61919
Support Staff
224482
0
1
May 17, 2024 16:18:36 GMT -8
Scott
23,384
August 2015
socalso
|
Post by Scott on Feb 8, 2018 11:13:03 GMT -8
The thread was locked by me and it was then unlocked and edited by the user.i shall go and get the print screen Please. However if they contain personal info, such as the IPs, please PM them to me rather than post here. Thanks.
|
|