If I understand the OP correctly at all:
1. A person registered using the (seemingly?) same username as an already existing admin.
2. That newly registered user did NOT have any admin permissions, i.e. did not make himself admin, but tried to get those permissions by asking other admins for them
While it is of course smart to remove the install directory, what indication is there that the forum was hacked? Is this something that has turned up in the recent situation (just curious)?
|