That when a moderator tries to ban an uneditable user, they get this rather scary message saying exactly where it's been set that the user cannot be edited?
Quote:
Sorry, this user is protected from being altered in the config.php file by the $config['SpecialUsers']['undeletableusers'] variable.
Doesn't that mean that any hacker who tried to ban an administrator at a vBulletin forum now knows exactly where to go to remove the 'uneditable' protection from the user so said user can be banned?
06-12-2008, 08:49 PM
Anyone find this a bit alarming?
Threaded Mode