password recovery

[Mary Hall]

A friend of mine keeps getting an email saying he asked to retrieve his password yet he doesn't need to since he knows his pass. My question is how can we find out who the hell is trying to get access to his account at message boards.

 

[Cathleen]

Hmmm, kind of odd for sure. My first thought is to contact Manu or Laurel to let them know and perhaps they'll trace the IP.

In the meantime I'd suggest your friend changes the email attached to their Lit membership and change their password too. I've heard if someone gets the email account used for this site then they can log in with our name -- creates lots of havoc.

Best I can think of at the moment.

 

[eXplorer63]

It's actually my account but has happened on a different set of forums, one today on a videogame/wrestling forum and earlier in the week on forums I run where I'm the root admin.

 

[Weird Harold]

A friend of mine keeps getting an email saying he asked to retrieve his password yet he doesn't need to since he knows his pass. My question is how can we find out who the hell is trying to get access to his account at message boards.

Notify the site admins at each message board affected that someone is trying to change his password. The site admins should be able to determine who it is.

It's possible that it might not be a malicious attempt to hijack his registrations -- although it probably is -- it might just be someone who wants to use the same username and thought they had registered that name at some time in the past.

 

[Mary Hall]

At 2 message boards he's recieved the same email and he doesnt recognize the ip address left behind. He's had trouble with some guy trying to hack a site of ours so we think this guy might be a suspect, trying to get payback after we banned him a dozen times.

 

[eXplorer63]

Yep, the recent one yesterday I notified the admin and he said not to worry, ignore any emails and change my password occasionally if I feel threatened enough to do so, as admin of the other forum which sent em the email earlier this week all I could do was email the forum hosts about it with a copy of the email I was sent and details on the hacker who joined and then repeatedly wanted access to the admin cp to delete the ads from the forums (which you can't do without paying) and after bannign and deleting him several times only for him to rejoin or attempt to rejoin using different emails and IPs, finally weeks later had that password recovery email.

That's pretty much the whole story then but I've informed the forum hosts that my forum is on, the admin of the other forum and AOL after Mary found the IP belonged to someone on their servers on the last email I received about it.