I’m facing an issue with my forum: a bot with administrator privileges cannot be deleted, which makes me worry that a hacker might one day take over my forum and exploit this ghost bot user.
If your server system has been compromised, what difference does it make whether the attacker uses the bot or directly modifies the database?
It is sufficient to ensure that your SSH account credentials remain secure and are not leaked.
When did you first notice the bot being there?
What ‘bot’ is this? Created by the ai plugin? Discobot?
It was the previous Discourse bot, but it stopped working after the name change.
Perhaps your discourse_narrative_bot_enabled setting was disabled? IIRC there was a change to new sites where Discobot will be turned off by default.
This feature is currently enabled. I also asked AI, and to revoke admin privileges, the command line must be used.
“How to force remove a user with…” Click here to view Yuanbao’s answer
The user in question is not discobot, discobot is this instead