How to track a illegal User in members area
 

Hello Everyone
Can some one please tell me if there is a way to find out how a certain user has managed to get himself added to members area WITHOUT paying through the billing processors? I noticed a suspicious username which for sure has been sharing out the password on the internet but to my surprise found that he did not join though any payment processor !!!!!! He was not added manually either.
So how do I go about hunting this rascal down?
Please hellllllllllllllllllp!

Most likely he added his own. Make sure your shit is secure :2 cents:

Can you not just close the account?

You need to get Password Sentry installed

http://www.monster-submit.com/sentry/

OK
Thanks. Have launched investigation

that doesnt prevent anything for next time

Some billers scripts have security holes in them and people can add/delete users at will, as well as empty your password file if they want amongst other things. :2 cents:

Find the user name and pass in the file, and remove it. Also track how it got in there. The server will have access logs.