The spammer is not due to lax security, I have been a forum admin for many years and squashing it on a large forum like this without invasive changes is hard to do. Spammers have automated software that create accounts and then post on those accounts but they are sophisticated nowadays. I know...