Actually, while the hacker is hacking his board, he can just change the userid to his userid. It's easier that way Mist.
Since when am I assuming that the userid of the main admin is 1? It's there to be edited.
Adding an option is risky, as other admins may view that page, and change it, before the head admin has time to get to the page while hacking.
Also, admins who have phpMyAdmin access or access to the database can easily change this to reflect a different userid, so they gain access again, and they will then most likely use it maliciously.
The best way is to keep it in the file.
|