View Full Version : Just Noticed....
Reycer
04-07-2009, 01:06 AM
Is this a possible flaw?
Vbulletin MODCP allows a Moderator to "ban" an administrator. Moderators shouldn't have that ability. Ban some users....yes.....ban the admin....NO!
nexialys
04-07-2009, 01:07 AM
i suggest you over-test your thing and submit it as a bug at vbulletin.COM!
Reycer
04-07-2009, 01:12 AM
I created a Super Mod account for myself, and guess what....you can do that.
Lynne
04-07-2009, 01:19 AM
Set your Admin Account to Unalterable in the config.php file. Then no one should be able to ban you.
Reycer
04-07-2009, 01:20 AM
Lynne, how do I do that?
Lynne
04-07-2009, 01:21 AM
Open the config.php file and find these lines. Enter your userid instead of the X:
// ****** UNDELETABLE / UNALTERABLE USERS ******
// The users specified here will not be deletable or alterable from the control panel by any users.
// To specify more than one user, separate userids with commas.
$config['SpecialUsers']['undeletableusers'] = 'X';
Justine
04-07-2009, 01:23 AM
I haven't tested myself but a super mod shouldn't be able to ban an ADMIN.
a BUG if it is true
Reycer
04-07-2009, 01:30 AM
thanks Lynne. Will add that.
Brandon Sheley
04-07-2009, 01:59 AM
I haven't tested myself but a super mod shouldn't be able to ban an ADMIN.
a BUG if it is true
It does seems like an option that shouldn't be :down:
Ohiosweetheart
04-07-2009, 02:11 AM
I agree. That needs to be fixed, or changed.
mrtroybaker
04-07-2009, 02:58 AM
Open the config.php file and find these lines. Enter your userid instead of the X:
// ****** UNDELETABLE / UNALTERABLE USERS ******
// The users specified here will not be deletable or alterable from the control panel by any users.
// To specify more than one user, separate userids with commas.
$config['SpecialUsers']['undeletableusers'] = 'X';
Thank you!!!!
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.