Is template backdoor possible?

[realestate]

Can creators of a template place a backdoor inside it. By backdoor I mean, a user more powerful than admin.

[hatchet]

Depends on what template you're talking about. In a phpbb template it would be pretty difficult to go without noticing.. unless they had access to the phpbb files themselves (other than .tpl). The code in the .tpl files are only replaced with calls to the other files. Someone else will probably have a better explanation - but IMO it would be pretty difficult.

[Jazzee]

You can always check the database for that kind of stuff.