If "$show['canusecustomtitle]" is disabled in the ACP (as I described in my previous post) then the option block in template "modifyprofile" is disabled and it should not show.
--------------- Added 16 Sep 2014 at 19:38 ---------------
I would log in as the spammer and see what he has access to. Checking your access logs can provide valuable insight here on an identity's activities.
|