Note, I think new apps created via admin are created from the 'welcome.w2p' packed version of the 'welcome' app in your /web2py/ root folder, not by copying the actual /applications/welcome/ folder. So, if the user got inserted into the packed 'welcome.w2p' file, then you'd have to replace that file to get rid of that user. Anthony
On Friday, April 29, 2011 9:01:00 PM UTC-4, nic wrote: > The user was indeed in the welcome app. > I deleted the user from the welcome app > then did a new simple app > and the user was there. > > I am now re-installing web2py on my server > Will let you know how it goes. > > I believe my server is secure but If this was someone gaining access > to my server then they were specifically targeting web2py as it is > quite specific to put a user in web2py auth_user. > > > > > On Apr 30, 10:32 am, Stodge <sto...@gmail.com> wrote: > > Did someone gain unauthorised access to your server and add a database > > fixture to create that user? > > > > On Apr 29, 5:31 pm, nic <nica...@gmail.com> wrote: > > > > > > > > > Thanks Ron, > > > > > Looks like my web2py is corrupted. > > > I may have to reload web2py on my server I have been using the upgrade > > > button on the admin app for some time now.