Support

Hello John,

I see that in the past you had created a user account for me to log in and help you with your site. I told you that once I am done you should deactivate that user account. It seems like you didn't. You need to do that now. Apparently someone else guessed the password and uses it to log in to your site and post spam.

Even though this is technically generic Joomla! support and outside the scope of our support services, I am going to outline the procedure for you.

Log in to the back-end of your site.
Click on Users, User Manager from the top menu
Above the name column there is a "Search" text box. Enter Akeeba in there and click the magnifying glass icon next to it.
You will see the user account you had created for me. Click on it.
Click on the "Assigned user groups" tab.
Make sure the only selected user group is "Registered"
Click on Save (NOT save & close!)
The page reloads {see note 1}.
Click on the Account Details tab.
Set the "Block this User" option to "Yes"
Click on Save & Close

Note 1: If saving resulted in a 403 error, please follow the steps below, then retry the user deactivation process above.

Go to Components, Admin Tools
Click on Web Application Firewall
Click on Configure WAF
Find the "Disable editing backend users' properties" and set it to No
Click on Save & Close

Yes, deleting the user will of course fix this issue. I guess I could have told you. There was too much blood in my caffeine stream, I guess :)