Serious Server Problem - Forced OP

[Jubulex]

Hi, I have a rather serious problem with my server. Yesterday a player logged into my server and was able to auto OP themselves. He was also able to move himself to different groups within group manager once he became OP. I have no clue how he was doing this. He claimed he used a "RAT" to be able to force OP himself. I really need help on any suggestions to fixing it.

# Group inheritance

#

# Any inherited groups prefixed with a g: are global groups

# and are inherited from the GlobalGroups.yml.

#

# Groups without the g: prefix are groups local to this world

# and are defined in the this groups.yml file.

#

# Local group inheritances define your promotion tree when using 'manpromote/mandemote'

 

groups:

  Default:

    default: false

    permissions:

    - -bukkit.command.kill

    inheritance:

    - g:groupmanager_default

    - g:bukkit_default

    - g:essentials_default

    - g:towny_default

    info:

      prefix: '&6'

      build: false

      suffix: ''

  Owner:

    default: false

    permissions:

    - -vanish.*

    - '*'

    inheritance:

    - admin

    info:

      prefix: '&5~Owner~'

      build: true

      suffix: ''

  Donator:

    default: false

    permissions:

    - tekkitcustomizer.27579.*.*

    - tekkitcustomizer.27580.*.*

    - tekkitcustomizer.27581.*.*

    - tekkitcustomizer.27582.*.*

    inheritance:

    - builder

    - g:groupmanager_moderator

    - g:bukkit_moderator

    - g:essentials_moderator

    - g:towny_moderator

    - g:vanish_moderator

    info:

      prefix: '&6~Donator~'

      build: true

      suffix: ''

  Builder:

    default: true

    permissions: []

    inheritance:

    - default

    - g:essentials_builder

    - g:towny_builder

    info:

      prefix: '&2'

      build: true

      suffix: ''

  Admin:

    default: false

    permissions: []

    inheritance:

    - donator

    - g:groupmanager_admin

    - g:bukkit_admin

    - g:essentials_admin

    - g:towny_admin

    - g:vanish_admin

    info:

      prefix: '&6~Admin~'

      build: true

      suffix: ''

# These groups only contain permission nodes.

#

# **** You can NOT add anything other than permission nodes ****

#

# These collections are to be inherited in your different worlds groups.yml's

# They can also be added as one of a users subgroups, but NOT as a primary group.

# These collections are available to ALL group and user yml's.

#

# Add to and customize these groups to fit yoru needs.

groups:

# Permission nodes for GroupManager

# by ElgarL, snowleo, continued from gabrielcouto's original

# http://dev.bukkit.org/server-mods/essentials/

g:groupmanager_default:

permissions:

- groupmanager.notify.self

g:groupmanager_moderator:

permissions:

- groupmanager.listgroups

- groupmanager.mandemote

- groupmanager.manpromote

- groupmanager.manselect

- groupmanager.manuadd

- groupmanager.manudel

- groupmanager.manwhois

- groupmanager.notify.other

g:groupmanager_admin:

permissions:

- groupmanager.mantogglevalidate

- groupmanager.mansave

- groupmanager.mangcheckp

- groupmanager.manglistp

- groupmanager.manucheckp

- groupmanager.manulistp

# Permission nodes for CraftBukkit

# by many devs and contributors

# http://dl.bukkit.org/

g:bukkit_default:

permissions:

- bukkit.broadcast.user

- -bukkit.command.plugins

g:bukkit_moderator:

permissions:

- bukkit.command.ban

- bukkit.command.ban.ip

- bukkit.command.ban.player

- bukkit.command.gamemode

- bukkit.command.kick

- bukkit.command.unban

- bukkit.command.unban.ip

- bukkit.command.unban.player

g:bukkit_admin:

permissions:

- bukkit.broadcast

- bukkit.broadcast.admin

- bukkit.command.give

- bukkit.command.help

- bukkit.command.kill

- bukkit.command.list

- bukkit.command.me

- bukkit.command.plugins

- bukkit.command.reload

- bukkit.command.save

- bukkit.command.save.disable

- bukkit.command.save.enable

- bukkit.command.save.perform

- bukkit.command.say

- bukkit.command.stop

- bukkit.command.teleport

- bukkit.command.tell

- bukkit.command.time

- bukkit.command.time.add

- bukkit.command.time.set

- bukkit.command.version

- bukkit.command.whitelist

- bukkit.command.whitelist.add

- bukkit.command.whitelist.disable

- bukkit.command.whitelist.enable

- bukkit.command.whitelist.list

- bukkit.command.whitelist.reload

- bukkit.command.whitelist.remove

# Permission nodes for Essentials

# by ementalo, snowleo, and KHobbits

# http://dev.bukkit.org/server-mods/essentials/

g:essentials_default:

permissions:

- essentials.help

- essentials.helpop

- essentials.list

- essentials.motd

- essentials.rules

- essentials.spawn

g:essentials_builder:

permissions:

- essentials.afk

- essentials.back

- essentials.back.ondeath

- essentials.balance

- essentials.balance.others

- essentials.balancetop

- essentials.chat.color

- essentials.chat.format

- essentials.chat.shout

- essentials.chat.question

- essentials.compass

- essentials.delhome

- essentials.depth

- essentials.home

- essentials.ignore

- essentials.itemdb

- essentials.kit

- essentials.kit.tools

- essentials.mail

- essentials.mail.send

- essentials.me

- essentials.msg

- essentials.msg.color

- essentials.msg.format

- essentials.pay

- essentials.ping

- essentials.powertool

- essentials.powertooltoggle

- essentials.protect

- essentials.seen

- essentials.sethome

- essentials.sethome.multiple

- essentials.signs.use.*

- essentials.signs.create.disposal

- essentials.signs.create.mail

- essentials.signs.create.protection

- essentials.signs.create.trade

- essentials.signs.break.disposal

- essentials.signs.break.mail

- essentials.signs.break.protection

- essentials.signs.break.trade

- essentials.suicide

- essentials.time

- essentials.tpa

- essentials.tpaccept

- essentials.tpahere

- essentials.tpdeny

- essentials.warp

- essentials.warp.list

- essentials.worth

g:essentials_moderator:

permissions:

- -essentials.spawner.enderdragon

- essentials.afk.kickexempt

- essentials.ban

- essentials.ban.notify

- essentials.banip

- essentials.broadcast

- essentials.chat.url

- essentials.chat.magic

- essentials.delwarp

- essentials.eco.loan

- essentials.ext

- essentials.fly

- essentials.helpop.recieve

- essentials.home.others

- essentials.jails

- essentials.jump

- essentials.kick

- essentials.kick.notify

- essentials.kit.*

- essentials.msg.magic

- essentials.mute

- essentials.nick

- essentials.nick.color

- essentials.nick.others

- essentials.realname

- essentials.seen.banreason

- essentials.seen.extra

- essentials.setwarp

- essentials.signs.create.*

- essentials.signs.break.*

- essentials.spawner

- essentials.spawner.*

- essentials.thunder

- essentials.time

- essentials.time.set

- essentials.protect.alerts

- essentials.protect.admin

- essentials.protect.ownerinfo

- essentials.ptime

- essentials.ptime.others

- essentials.togglejail

- essentials.top

- essentials.tptoggle

- essentials.unban

- essentials.unbanip

- essentials.weather

- essentials.whois

- essentials.world

- essentials.world.*

g:essentials_admin:

permissions:

- -essentials.backup

- -essentials.essentials

- -essentials.reloadall

- -essentials.plugin

- -essentials.setspawn

# Permission nodes for Towny by ElgarL

# http://dev.bukkit.org/server-mods/towny-advanced/

g:towny_default:

permissions:

- towny.chat.general

- towny.chat.local

g:towny_builder:

permissions:

- towny.town.*

- towny.nation.*

- towny.chat.town

- towny.chat.nation

- towny.wild.build.6

- towny.wild.destroy.6

- towny.wild.destroy.14

- towny.wild.destroy.15

- towny.wild.destroy.16

- towny.wild.build.17

- towny.wild.destroy.17

- towny.wild.destroy.18

- towny.wild.destroy.21

- towny.wild.destroy.31

- towny.wild.destroy.37

- towny.wild.destroy.38

- towny.wild.destroy.39

- towny.wild.destroy.40

- towny.wild.destroy.50

- towny.wild.destroy.56

- towny.wild.destroy.73

- towny.wild.destroy.74

- towny.wild.destroy.78

- towny.wild.destroy.81

- towny.wild.destroy.82

- towny.wild.destroy.83

- towny.wild.destroy.86

- towny.wild.destroy.103

- towny.wild.destroy.106

- towny.wild.destroy.111

- towny.wild.destroy.115

g:towny_moderator:

permissions:

- towny.chat.mod

- towny.wild.switch.64

- towny.wild.build.83

- towny.wild.build.86

- towny.wild.build.103

- towny.wild.build.111

- towny.wild.build.115

g:towny_admin:

permissions:

- towny.admin

- -towny.wild.destroy.119

- -towny.wild.destroy.120

- towny.chat.admin

# Permission nodes for VanishNoPacket by mbaxter

# http://dev.bukkit.org/server-mods/vanish/

g:vanish_moderator:

permissions:

- -vanish.*

- vanish.vanish

- vanish.smokin

- vanish.nofollow

- vanish.nopickup

- vanish.preventincomingdamage

- vanish.hooks.dynmap.alwayshidden

- vanish.hooks.essentials.hide

g:vanish_admin:

permissions:

- vanish.silentjoin

- vanish.silentquit

- vanish.silentchests