Elxis CMS Forum

Support => Security => Topic started by: ipghmagnet on March 20, 2015, 05:55:51

Title: Two mysterious users listed in my list
Post by: ipghmagnet on March 20, 2015, 05:55:51

Today i found 2 mysterious users listed in my user lists.
I never add them and don't know where they from.

Is that means elxis not safety?

Rgds.
Guo

Title: Re: Two mysterious users listed in my list
Post by: webgift on March 20, 2015, 10:49:13

Elxis has been installed on a server and it has been configured by a user. It is not an Elxis issue if it has been installed on a server with
full of security leaks or the user who administer the installation has not been taken all the security measures. So as you can easily get
here we have to answer when, how and why did it happen to your installation.

Please give us more detailed information about.

Title: Re: Two mysterious users listed in my list
Post by: ipghmagnet on March 21, 2015, 05:27:53

Dear Webgift,
Mar 18th, Mar 19th,  in my user list , 2 mysterious account increased.
One is in "block" status, another is active same as my other user.
I am the administrator, i never creat these account. 

When i install, i didn't change " estia" name , and also i didn't move repository to root category.

Now if i still have the possibility to change estia and move respository to other category..

As i remember you are in my skype, my skype rommy_g. You once helped me install other website..

But i cannot find your skype name now..

Can i get help from you on skype?

Best regards.

Guo 

Title: Re: Two mysterious users listed in my list
Post by: webgift on March 21, 2015, 11:09:24

Hello @ipghmagnet!
Unfortunately i used a Skype account but i do not now.
Visitors can create an account to your Elxis website in case that you have enabled user's registration process. Once they complete the
registration and in case that the account activation method has been set through E-mail then they do activate their account as well.

So you have to check if you have enabled or not the registration process from your administrator area. You will find on from top
menu Site -> Settings -> [tab] Users and Registration -> [option] Users registration. Set it to No in case of Yes.

In case that it has been set to No then we will have to look log files even to go deeper one step per time. Please inform us if
Users registration process was set to Yes and you changed it to No after this message.

Thank you!

Title: Re: Two mysterious users listed in my list
Post by: ipghmagnet on March 21, 2015, 14:58:16

HI WEBGIFT,
I found the account activation by email.
Now i set with " manually by administrator" ..
Hope problem will not happen again.
Thanks a lot for your support..

Best regargds.

Title: Re: Two mysterious users listed in my list
Post by: webgift on March 21, 2015, 18:29:28

You are very welcome @ipghmagnet!
Please take under consideration here that you have to set the user's registration option to NO in case that you
want to avoid visitors create accounts. In case that you leave this option to YES then visitors will be able to
create accounts on your Elxis website but these accounts will be blocked by default.

Thank you!