Not sure yet if this is extra information or a cry for help.
During the recent botnet attacks on WordPress installations worldwide, our admin installed Better WP Security. This allows for the changing of both user id and username for his WP user ‘admin’. Our admin did both.
The result seems to be as follows:
– User attempts to log in with old credentials (admin) via the SP forum and gets bounced to the main WP login page. The only way to login is with the new credentials (newadmin). Success.
– When logged in with the new credentials (newadmin) the forum identifies the user as a new member (albeit with the original join date) and with no posts attributed. No admin rights either.
– The wp_sfmembers table displays a row for both the original user id 1 ‘admin’ and a new row for id 123 ‘newadmin’.
– However wp_users and wp_usermeta have no reference to user id 1. All the data is now stored in id 123 ‘newadmin’.
Am I asking for trouble by deleting the new row on wp_sfmembers and then changing ID 1 and name ‘admin’ on the original row to the new credentials? Hmmm… I’d need to change the user id on posts by user 1 too…
And yes, the admin did backup first.
Apparently Better WP Security facilitates this.