Nemo:
Re: “Your site is hackable, and apparently nothing can be done.............
”
I don't think Bob's site is particularly vulnerable. Someone (most likely zzfart) guessed your password and logged on.
Once he was on, you changed your password but he didn't log off so he was STILL on as you. He could have even changed your password back since password changes on AB don't require the entry of the old password. At least, I don't think they do. There's not much you can do to get him out if he doesn't leave short of asking Bob to reboot his system.
Moderators are able to delete messages, so zz (presumably) then proceeded to cause damage wherever you had privileges. If Bob is able to track down the IP address of the culprit, he can probably ban him permanently.
Moderators are also able to ban and un-ban various parties. So zz was able to restore access for himself to the Pope IV board.
ribit had good advice - to give yourself a strong password. But I don't think that will get zz out of your account if he refuses to log off or disconnect his session. He could stay on as you for days or weeks.
Nobody except Nemo needs a new password. I believe I read that zz was posting as Nemo. That tells you that Nemo's account is the one (and only one) that got hacked. The problem is, until zz logs out of the account, Nemo can change his password but zz (as Nemo) can just change it back. It will stay that way until the login session disconnects. Only Bob and zz can make that happen.
Time to run. It was good to hear from you, Zimbler0. I'll use Pope 5 the next time I visit.
| 
