Thanks for the answer. I thought I had changed that at one point but obviously not.
The above code changes work like a new John Deer on a sunny day but does not prevent reply to PM's. If I wanted to prevent that I would edit the sendmessage.php authentication function correct? Need to make sure I am really understanding my lessons.
Thanks everyone for you patience.