Note, I think new apps created via admin are created from the 'welcome.w2p' 
packed version of the 'welcome' app in your /web2py/ root folder, not by 
copying the actual /applications/welcome/ folder. So, if the user got 
inserted into the packed 'welcome.w2p' file, then you'd have to replace that 
file to get rid of that user.
 
Anthony

On Friday, April 29, 2011 9:01:00 PM UTC-4, nic wrote:

> The user was indeed in the welcome app. 
> I deleted the user from the welcome app 
> then did a new simple app 
> and the user was there. 
>
> I am now re-installing web2py on my server 
> Will let you know how it goes. 
>
> I believe my server is secure but If this was someone gaining access 
> to my server then they were specifically targeting web2py as it is 
> quite specific to put a user in web2py auth_user. 
>
>
>
>
> On Apr 30, 10:32 am, Stodge <sto...@gmail.com> wrote: 
> > Did someone gain unauthorised access to your server and add a database 
> > fixture to create that user? 
> > 
> > On Apr 29, 5:31 pm, nic <nica...@gmail.com> wrote: 
> > 
> > 
> > 
> > > Thanks Ron, 
> > 
> > > Looks like my web2py is corrupted. 
> > > I may have to reload web2py on my server I have been using the upgrade 
> > > button on the admin app for some time now.

Reply via email to