Hi again , my forum just has been hacked 😅
This account is registered normally, but he is set as "admin" in my forum. I was lucky to find this out before he could do anything while randomly checking the group list .
my users are 100% vietnamese, so i know what their account will look like, this account is completely different ( i just ran the forum to checking and haven't introduced it anywhere)
The question is how can he grant admin rights (of course flarum's configured that only admin can change the user's group), i'm sure all admin accounts are managed by me and passwords are hidden
Is there any way for me to know what happened ? (like user logs for example) .
The scenario I'm thinking of right now is a brute-force attack (because the login page isn't protected by recaptcha or something like that, and they just need to check with username admin)
it's quite scary when some weird account is set as admin in your own forum