2

This is an unnecessarily strict rule and it has already been removed in code base. The change should be reflected in the next major JED Checker release. See this commit for reference.


2

Keep in mind that: https://github.com/btoplak/Joomla-Anti-Malware-Scan-Script--JAMSS-/blob/master/README.md#:~:text=this%20script%20gives%20out%20many%20false,%20so%20be%20cautious says: this script gives out many false-positive files, as it is not "ironed out" yet, so be cautious https://github.com/btoplak/Joomla-Anti-Malware-Scan-Script--JAMSS-...


1

If you only have a low number of real users expected to join you could disable automatic registration and put an approval by admin step in there. On a popular Joomla based forum website we only have one or two a week join so they have to email their details and answer a couple of subject matter questions before we create a user account. It is a lot less time ...


1

With Admintools it keeps a history of banned IP's as well as the currently banned IP's. If you check the #__admintools_ipbanhistory table via phpMyadmin or whatever you use you will probably see the people or their IP's listed. I have found clearing this table of the entries has solved a similar issue that I have had in the past.


1

Before Joomla 3.8.13, a non-super user could update core components. From 3.8.13, that is no longer possible.


Only top voted, non community-wiki answers of a minimum length are eligible