12 {{ upvoteCount | shortNum }}
12 {{ upvoteCount | shortNum }}

Someone signed up on TWO of my sites as an ADMINISTRATOR!

by Mike Hlatky
10 replies
Yesterday, the same person signed up on two of my completely unrelated sites as an administrator.

User - smatrix
Name - Colin Lutz

How can I prevent anyone from registering on my sites? I have no idea how he was able to become an administrator.
#administrator #signed #sites
  • Profile picture of the author kylenelson24
    Have you tookin a look under your general settings? Under these two options below. Maybe they were changed some how?

    Signature

    All Services Provided by
    Kyle Nelson
    [/CENTER]

    {{ DiscussionBoard.errors[6570427].message }}
  • Profile picture of the author Mike Hlatky
    That was the first thing I looked at. The box was unchecked. He somehow forced his registration as an admin.
    {{ DiscussionBoard.errors[6570491].message }}
  • Profile picture of the author TheProgrammer
    study these weakpoints. Take 5 Minutes to Make WordPress 10 Times More Secure : @ProBlogger
    Signature
    {{ DiscussionBoard.errors[6570551].message }}
  • Profile picture of the author Jordan Kovats
    I had that last month....except just a registrant when one of my sites had nowhere to register. That was the part that baffled me. How does one register where there is nowhere to register???

    Regardless, I unchecked the same box.
    Signature
    Travel Insurance
    Term Insurance Quote
    {{ DiscussionBoard.errors[6570562].message }}
  • Profile picture of the author Mo Goulet
    Why is your Administrator named Admin?

    when you set it up, you should name it adminXXXXXXX (something only you know)
    Signature
    Domain Names For Sale. Make an Offer.
    {{ DiscussionBoard.errors[6570685].message }}
    • Profile picture of the author Blase
      [QUOTE=Mo Goulet;6570685]Why is your Administrator named Admin?/QUOTE]

      Mo, LOL!

      Other than that, I think the biggest mistake most
      people make is using Fantastico to set up their blogs.

      The number one problem is that it always sets up the DB as
      wp1_ every hacker in the world knows that.

      If you set up your own you can call it what you like and set up some usernames and passwords that will be very strong.
      Signature
      "Nothing Happens Until Something Is Sold"
      {{ DiscussionBoard.errors[6571022].message }}
      • Profile picture of the author Damien Kring
        Originally Posted by Blase View Post

        Other than that, I think the biggest mistake most
        people make is using Fantastico to set up their blogs.
        This is wonderful advice. I always set up Wordpress installations manually. I understand that folks who have never done it before might view the process as a bit intimidating, but it's truly not.

        Roughly, all you have to do is upload Wordpress to your host, create a mysql database, add a user to that database, and edit wp-config. This can all be done via cPanel and your favorite FTP client. There are tons of guides floating around that can walk you through the process.

        Setting up Wordpress on your own plus following some of the excellent security advice in this thread should result in a very secure installation. That is to say, an installation that's more secure than 95% of the sites that use Wordpress.

        It might seem like a lot to do up front, but this can all be done relatively quickly once you get the hang of it.
        {{ DiscussionBoard.errors[6571084].message }}
  • Profile picture of the author sbucciarel
    Banned
    I use limit-login-attempts.1.6.2 plugin. Works great and I set the minutes that they can try again to something real high like 999. Not sure how they logged in to create an admin acct, but this may work for you.
    {{ DiscussionBoard.errors[6570743].message }}
    • Profile picture of the author Blase
      Originally Posted by sbucciarel View Post

      I use limit-login-attempts.1.6.2 plugin. Works great and I set the minutes that they can try again to something real high like 999. Not sure how they logged in to create an admin acct, but this may work for you.
      Nice find, I have to take a look at that. Thanks
      Signature
      "Nothing Happens Until Something Is Sold"
      {{ DiscussionBoard.errors[6571024].message }}
  • Profile picture of the author SocialMediaOwls
    Hey man, Admin is the only way to go...
    Signature

    Health and Fitness niche Affiliate Program | High CTR/EPC | Personal Account Manager 24/7 support https://influencer.bulksupplements.com

    {{ DiscussionBoard.errors[6571922].message }}

Trending Topics