When the “Hacker” Is Actually… the Client

As a web developer, you get used to unexpected messages from clients. But every now and then, you get one that deserves its own chapter in the “developer memoirs.” The Morning Panic One morning, I received an urgent message from a client: > “You’ve given EVERYONE admin access to my website! Anyone can change or delete things now!” That’s the kind of text that makes your heart rate jump before you’ve even finished your coffee. My mind was already running through worst-case scenarios — hacked site, compromised database, client data leaks… The Investigation I jumped into the backend, checked user roles, recent logins, and security logs. Everything was fine. No extra users, no suspicious activity. Then it hit me. The “everyone” he was talking about… was himself. He was logged into his own admin account — which is why he could see the WordPress admin panel. The Explanation We spent 30 minutes walking through: Why admins see the dashboard and editing tools How different user roles have different permissions Why no one else could see what he was seeing By the end of the call, he laughed and admitted he might have overreacted. The Takeaway This wasn’t just a funny moment — it was a reminder of something crucial in our work: Clients don’t live in our world. They see things differently. Education is part of the job. Clear explanations can turn panic into relief. Patience matters. Sometimes the “big problems” aren’t problems at all. In the end, nobody’s website was hacked, nothing was broken, and we both got a good laugh out of it. Have you ever had a “false alarm” like this in your line of work? Share your funniest story — I’m always collecting them.