Two users with same user name.... how?

[lapiervb]

I got up this morning and noticed somebody had two users with the same username, same email and signed up at the same time 3:37 am. Has anybody seen an account duplicate like this before?

[ozzy47]

Did you check to make sure that those users are not added as admins?

[creative-friend]

Delete them as soon as possible

Turn your site off and check if u have any exrta admins.....

This maybe the attack of hackers.....Delete your Install directory....

[ForceHSS]

They are hackers this is what they do

[snakes1100]

You can end up with two users having the same name simply by not protecting your board from regex based usernames, which has nothing to do with being hacked.

[lapiervb]

Install directory was deleted a long time ago and there are no additional admins. This has nothing to do with the fiasco that has been going on the last week with not deleting the vb install and all of the hacks.

[Zachery]

The usernames are not actually the same. They've used a higher level ascii character that "looks like" but is not the same.

[dawges]

Go to Options then user registration options

under username regular expression put the following code.

^[A-Za-z0-9 ]+$

We had the same problem until I found this fix.

[snakes1100]

Use this instead:


^((?!&#\d+;)[\x20-\x7E])+$

[Steve-Hoog]

I had the same thing this morning, both at Admin level. We just got wiped out a few days ago, they destroyed our vB files.

This is who tried to get in this morning.

ppp ppp@gmail.com 09-17-2013 09-17-2013 0

--------------- Added 1379427345 at 1379427345 ---------------

I have a question. If I bring up several to Super Mod and give them ACP to help delete these spooks that are hacking as soon as they get in, will a Super be able to deleted a hacked Admin account?

--------------- Added 1379427531 at 1379427531 ---------------

Use this instead:


^((?!&#\d+;)[\x20-\x7E])+$

Snakes, I am not experienced in this code stuff. What will this do for us?

[ozzy47]

I have a question. If I bring up several to Super Mod and give them ACP to help delete these spooks that are hacking as soon as they get in, will a Super be able to deleted a hacked Admin account?


It depends, on exactly how the hackers are getting in and if there is any files they loaded. I would worry more about blocking them from getting in at all, rather than worrying about deleting them once they are in. :)

[Steve-Hoog]

It depends, on exactly how the hackers are getting in and if there is any files they loaded. I would worry more about blocking them from getting in at all, rather than worrying about deleting them once they are in. :)

10-4 to that but so far no one seems be able to figure out how they are doing it.

I see all the stuff about the Install file, but many say they have done that and it is still happening. Here and vb.com.

Many say 4.1.x was not part of this exploit, but they got me under those conditions.

I want to start comparing Plugins with others to see if that will show a trend.