How can that be? Does that mean that your users can be impersonated? You should get a look at your server logs to see how that is done! Something is very wrong with that!
Steve, are these 'not real members' in that they signed up using forumtool or something similarly unpleasant, but are not proper participants in the forum?