Regular member has access to editing users

[jbart04]

This is not the first time this has happened. The last member that could do this, we deleted his account and created a new one for him and it was fixed. Now, another member is saying he has access to the same thing. I have a video clip of him doing it too.

I have no clue how this could be happening. I've check all his permissions, usergroups permissions, permission masks, etc and everything shows that he can't do this, but his video states otherwise.

And like I said, this is the second member that's been able to do this. I'm lucky that so far it's been 2 trustworthy members and they have brought it to my attention...I'm just afraid some not so trustworthy members have this access but don't know about it quite yet.

Also, I just asked him to log into the MOD CP, and he can. He just sent me a screen shot of it, but I'd rather not post it but would gladly pm it and the video to a staff member here if they don't believe this.



What do I do?

[Lynne]

Disable all your modifications and then see if he can do the same thing.
Note: To temporarily disable the plugin system, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);