Former Admin entering and changing his usergroup

[motowebmaster]

Is this user still a moderator? Check to see if Moderators or Super-Moderators have the ability to change the usergroup assignments.

[Mark C]

I have looked at the logs for the server, and the forum. I see nothing. He could change his usergroup from "Registered User - Moderated" to "Registered User" at will. He did it while I watched. It's almost as if he had my own password, possibly from when I logged onto the forum with his computer a few years ago.

I have since changed my own passwords, checked the status, double checked what I know about the config php file, placed him into banned user group, changed his password, and made retrieval of that password by email impossible. So far, he has not been able to do anything, if he has tried.

[Lynne]

The access logs should show exactly how he changed his usergroup. You should be able to see if he is in the admincp by looking at the access logs. It should also show if he is using his own id or someone else's.

[Mark C]

Since I was the only one logged into the admincp, I have deduced he had my password. He also had the password of a supermod who denies being in the admin cp at that time.