Hi,

Today a DNN site I manage had an account created -- although registration on the site is set to "none". Fortunately, I received a notice of the account being created. So, I logged into the site and found the account (it wasn't authorized) and I deleted it, then removed it. According to the events log, the account was created from an IP address in Indonesia. All accounts on the site that are legitimate have been created by admin accounts and not through general site registration.

I did check to see if any Super Admin accounts had been created and none had.

Any idea as to how someone managed this? 

Thanks for any info.

Hi Micheal and thanks for the response.

We're running DNN 07.03.04 (45). And of course, my main concern is that we have the site set to "None" for registrations, so I wonder how (or why) DNN is allowing the registration to happen. I could update DNN to the last build of 7 (which is 7.4.2 I think?) if that might take care of the issue. Hopefully it won't break the site.

Thanks again!

Hi Sebastian,

That's a heck of a bug! I have another development site for the same client running the same build of DNN and the same skin / module setup. So, I think I'll do a complete backup of that site and upgrade it to 7.4.2 and see how it goes before tackling the primary site.

BTW - Thanks again for all of your help over the years :-)