Hello

My site has been hacked twice and I gor malware installed in it. I am now very paranoid about my sites security.

By default my site came with an "admin" and "host" account with their respective passwords. Of course I have changed the passwords.

I am now wondering if it would be even more secure to delete those two accounts and create a new Administrator Account and new SuperUser Account with different usernames other than host and admin which are the default ones.

Is it possible to delete the Admin and Host accounts? I know it might seem a silly question but I have had so many problems in the past deleting things without knowing that now I want to make sure I won't make any mistakes.

Thank you in advance for your help!

Mako

You can create additional Host accounts by logging in as Host and adding a new super user account from the Host -> SuperUser Accounts menu option .

You can create additional Admin accounts by adding a new normal user and assigning it the Admin role.  
You can then associate this new account with a portal by opening Admin -> Site Settings : Advanced Settings -> Other Settings section and selecting the account you want as the sites main admin account.

You can then delete the old Admin account thru the Admin->User Accounts module.

There is however no direct way to delete the master host account - however - there is a way to make the old account appear deleted - but you require access to sql to do this - basically you alter the host record with a call something like this.

UPDATE Users
      SET IsSuperUser = 0 , IsDeleted = 1
      WHERE UserID = 1

Which sets the Host record which is usually 1 to deleted status and for precaution also turns off the superuser flag.

Westa