Hi, overnight I've received a filled in admin form which looked suspicious as well as it was filled in at a time that no user should be online. So I have a couple questions. Can non-users submit a admin contact form? And if not, how can I see which user submitted the form? As it only shows a emailaddress in the submitted form and not a potential user that has submitted it.
I've switched off the admin form now so it can't happen again. But I'm curious to see if one of the user accounts is compromised or if it's a general contact form that can be used from the account creation page.
Thanks.