User talk:Zhuyifei1999: Difference between revisions

→‎User:Emufarmers: backdoor access
(→‎User:Emufarmers: backdoor access)
Line 53: Line 53:
The page was deleted and protected because it had been the target of a spammer/vandal. Spamming contained religious commentary which was removed. [[User:TeraS|TeraS]] ([[User talk:TeraS|talk]]) 03:47, 5 May 2013 (PDT)
The page was deleted and protected because it had been the target of a spammer/vandal. Spamming contained religious commentary which was removed. [[User:TeraS|TeraS]] ([[User talk:TeraS|talk]]) 03:47, 5 May 2013 (PDT)
:I'm just researching why he can be an sysop, how [[User:Emufarmers2]] exist without creating an account, just things like this. --[[YiFei]] | <small>[[User talk:Zhuyifei1999|talk]]</small>  10:53, 5 May 2013 (UTC)
:I'm just researching why he can be an sysop, how [[User:Emufarmers2]] exist without creating an account, just things like this. --[[YiFei]] | <small>[[User talk:Zhuyifei1999|talk]]</small>  10:53, 5 May 2013 (UTC)
::I'm not a programmer (so I don't know the specific detail), but I think I've heard that anyone who has access to a certain MediaWiki file (maybe 'settings.php') on the host server can somehow gain 'backdoor' access to a wiki, and grant themselves sysop and crat rights, without actually having an account on said wiki.  I've blocked Emufarmers2 - but I still think we have vulnerabilities with our software setup.  [[User:Hoof Hearted|Sean, aka <small>Hoof Hearted</small>]] • <sub>[[:Category:Active administrators of this wiki|Admin]]</sub> • <small>[[User talk:Hoof Hearted|talk2HH]]</small> 05:38, 5 May 2013 (PDT)