Log in

View Full Version : Just Noticed....


Reycer
04-07-2009, 01:06 AM
Is this a possible flaw?

Vbulletin MODCP allows a Moderator to "ban" an administrator. Moderators shouldn't have that ability. Ban some users....yes.....ban the admin....NO!

nexialys
04-07-2009, 01:07 AM
i suggest you over-test your thing and submit it as a bug at vbulletin.COM!

Reycer
04-07-2009, 01:12 AM
I created a Super Mod account for myself, and guess what....you can do that.

Lynne
04-07-2009, 01:19 AM
Set your Admin Account to Unalterable in the config.php file. Then no one should be able to ban you.

Reycer
04-07-2009, 01:20 AM
Lynne, how do I do that?

Lynne
04-07-2009, 01:21 AM
Open the config.php file and find these lines. Enter your userid instead of the X:

// ****** UNDELETABLE / UNALTERABLE USERS ******
// The users specified here will not be deletable or alterable from the control panel by any users.
// To specify more than one user, separate userids with commas.
$config['SpecialUsers']['undeletableusers'] = 'X';

Justine
04-07-2009, 01:23 AM
I haven't tested myself but a super mod shouldn't be able to ban an ADMIN.

a BUG if it is true

Reycer
04-07-2009, 01:30 AM
thanks Lynne. Will add that.

Brandon Sheley
04-07-2009, 01:59 AM
I haven't tested myself but a super mod shouldn't be able to ban an ADMIN.

a BUG if it is true

It does seems like an option that shouldn't be :down:

Ohiosweetheart
04-07-2009, 02:11 AM
I agree. That needs to be fixed, or changed.

mrtroybaker
04-07-2009, 02:58 AM
Open the config.php file and find these lines. Enter your userid instead of the X:

// ****** UNDELETABLE / UNALTERABLE USERS ******
// The users specified here will not be deletable or alterable from the control panel by any users.
// To specify more than one user, separate userids with commas.
$config['SpecialUsers']['undeletableusers'] = 'X';




Thank you!!!!