User Awaiting Email confirmation had signature though signatures are disabled?!
 

Hi - this is a new issue that I've just come across. I'm running 3,5,5
A spammer signed up on my forum and he had a signature, even though signatures are disabled for the Users Awaiting Email Confirmation and New Registered Users, it was in his profile.
He never confirmed via email.
The only thing similar I know of that I've seen before was with phpBB when people could override the registration system and submit a registration request directly using POST/GET.

Any ideas?