I discovered a 'new member' who was able to give himself 'Administrator' status. (Which scares me.)

I demoted this hacker to 'user' status -- banned him and his IP address (proxy).

I'm not sure how this happened nor am i sure how to prevent it in the future. Myself and the other admin are changing our passwords. I changed the CP so that new registrants need Admin approval.

Anything else? Any ideas?

(On a separate note, i'm not sure if this hacker caused our server to crash, https://www.ubbcentral.com/forums/ubbthreads.php/topics/240109.html#Post240109 )