Here's the deal. I added a few lines to the register.php page to help prevent bots and spammers from joining, and I don't know if this caused it, but now you're able to register with no password entered into either password blank.
Any ideas? It's really bad because you could register, be auto...