I am having an issue with my site, there are users accessing it and creating accounts without having a role.
Here we can see user roles is blank. From my understanding someone has found a weakness in our system and has exploited it to create accounts with no roles.
since the account has no role does this mean its not subjected to the rules of any role? Do these accounts have admin access to our site or would it be closer to anon users.
Is there any basic thing that I could do to stop people with no roles getting in? Or is there a way to see how a user with no role is created (understanding the process would help me fix the problem)?
Version: Drupal 7
Module: User 7.32
Module: LoginToboggan 7.x-1.4