Well, currently, I have open registration but I require prerequisites to become a member and I also require specific information to be filled in when a user registers to make sure that they have those prerequisites. Yesterday, I had someone 'fake' the required prerequisite field and was logged on to the board. Cruising where they shouldn't have been.
What I did was ~
1. Changed their group
2. I banned their IP.
3. Closed the board.
4. Deleted their account.
What happened was ~ they were still able to cruise the board since their session cookie had all the right permissions. What I wanted to do was to terminate access at that point - instantly. Basically expiring their session cookie immediately by manually logging them out via admin CP.
Is there a way to do this ~ a hack maybe?
Thanks,
Tom
