It seems that users are changing groups?

[pityocamptes]

I have two groups - and "junior member" is not one of them. I have noticed that a couple of spammers actually changed the default group to "junior member" and user group icon. Is this a setting I missed? Thanks.

[ForceHSS]

More than likely its a custom plugin doing it

[pityocamptes]

Well I have custom titles and noticed in the User Title Management that it showed junior member, member, and senior member. I deleted these as I believe these can be changed in user cp for resetting user group and title. However, I still see this option in user cp. How do you remove this option, or will it simply not work since I deleted the three groups? thanks

[tbworld]

This might help:

ACP --> Usergroup Manager --> Usergroups --> General Permissions --> Can Use Custom Title: yes/no

[pityocamptes]

Thanks, they are all changed to NO... however, even in my profile I still see this:

Reset

This is the title that appears beneath your name on your posts. Check the 'Reset' box if you wish to use the default title for your usergroup and post count.

[ForceHSS]

Thanks, they are all changed to NO... however, even in my profile I still see this:

Reset

This is the title that appears beneath your name on your posts. Check the 'Reset' box if you wish to use the default title for your usergroup and post count.
Are you looking at your admin profile as it won't be the same as a normal members profile

[pityocamptes]

Yea I was. However, when I check what tbworld indicated all user groups showed NO for Custom Title. So I'm not sure how a spammer was changing it...

[tbworld]

If "$show['canusecustomtitle]" is disabled in the ACP (as I described in my previous post) then the option block in template "modifyprofile" is disabled and it should not show.

--------------- Added 16 Sep 2014 at 19:38 ---------------

I would log in as the spammer and see what he has access to. Checking your access logs can provide valuable insight here on an identity's activities.

[pityocamptes]

Thanks, I'll have to what until someone spams and account again. I deleted all of them...

[tbworld]

Thanks, I'll have to what until someone spams and account again. I deleted all of them...

Sure thing. :)

[pityocamptes]

OK, I have a new spammer account. How do I change the pw so that I can see what is going on? Thanks.

[tbworld]

OK, I have a new spammer account. How do I change the pw so that I can see what is going on? Thanks.

You can examine the server access logs. If your TOS allows you to examine a possible spam account then you can use a MOD that allows you to log-in as a user.

https://vborg.vbsupport.ru/showthread.php?t=233350&page=4

There are a few of these mods on vbulletin.org. Please read the thread of the modification before using and always backup. :)

[pityocamptes]

OK logged in as user and it does not show the option to change group/title. Now, could it be that vbulletin enrolled them as a user, but they never confirmed the email thus the system would give them the default user title? If this is the case how would I go about making sure a user does not show up in the member list or new registration until they finish confirming the email request? Unless someone has a better idea of why this is happening...