So, I had to lock down the forum the other day. Despite some anti-spam and anti-bot measures, we were getting quite a few spammers creating accounts. I spent about an hour the other day cleaning them out. I decided to make a change so new accounts have to be approved and can't be created automatically. I haven't tested it out, but that should mean that I get a notification that an account needs to be authorized. If I get a chance this weekend, I'll test it out.
Also, I'll need to update the forum sometime. phpBB released a new version. Part of the forum broke the last time I did an update that major but I make sure to make a backup of the database prior to updating.