Graeme, is this patch pretty secure?
For example, if someone is not on the OpenACS website, but they are registered on the web/db board, what would happen if I tried to create an account as them? I guess I probably would just get all their postings linked to my new account, right?
I guess that's not as bad as it seems. :)