"The best security advice that I have is for you to force people to give you a valid email address so they can get their initial password, and allow mods and admins to see IP addresses. You could even block email registrations from free sites like hotmail and yahoo, and any site that acts as an autonomizer. People are less likely to get out of line if they have to give you an email address from their ISP or a work email server..."
That makes a lot of sense but people can also change the email after they register... there should be a verification when the emails are changed too
