[Moin-user] disabled new user creation, but still find new accounts?

[R. Yu]

hello all,

I'm using moin 1.5.7 as a personal CMS.  I've disabled new user creation by modifying userform.py,
as described in the "clean solution" here:
http://moinmo.in/FeatureRequests/DisableUserCreation

The modification seemed to work:  if I tried to create a new user, I get a "new user accounts
disabled" message and nothing is written to the user/data directory (which currently has write
permission).

However, whenever I check in my data/user directory after some period of time, I always find a
bunch of new users in user/data--the user accounts are created, though the new users can't
actually login.    I'm concerned that I've left a hole in my system for spammers, but for the life
of me, I can't figure out how this happens.  Does anybody know how the new user accounts get
created despite my changes to userform.py?

thanks,
-Rob