This sounds like a NO brainer but today I found out that someone had created an account and changed one of my skin pages.  They erased all the JavaScript I was using to allow users to change the background image.

I found out I hadn’t changed the configuration key for security/new-account-role. 

This could have been a BIG problem.  Hopefully my readers won’t have this issue.  To avoid this make sure to go to your Control Panel.  Click on the System Settings tab.

Once there Click on the Configuration sub menu and scroll down to the configuration key you see in the above picture.  (the one by the red arrow)  Change that to Viewer or whatever you want to change it to.

You can also keep people from registering by changing the security/allow-anon-account-creation to false.  You can also see this configuration key in the picture above.

Well I hope this helps.  It is something small, but could really get you in a bind REAL quick.  I think the default is set to Contributor, so PLEASE check this out right away.

~MikePixel (Michael Silva)