Any account can "go on line". However if the account is not activated they cannot post or PM.
There are hundreds of spam bots stuck as "not confirmed". There is no need for me to spend time dealing with these accounts because they are unable to post anything. I only deal with those that activate their accounts and start trying to post spam messages.
Thanks for clearing my curiosities.
Just to share with broses
Forum spambots surf the web, looking for guestbooks, wikis, blogs, forums, and other types of web forms that it can then use to submit bogus content. These often use OCR technology to bypass CAPTCHAs. Some spam messages are targeted towards readers and can involve techniques of target marketing or even phishing, making it hard to tell real posts from the bot generated ones. Other spam messages are not meant to be read by humans, but are instead posted to increase the number of hyperlinks to a particular web site, to boost its search engine ranking.
One way to prevent spambots from creating automated posts is to require the poster to confirm their intention to post via e-mail. Since most spambot scripts use a fake e-mail address when posting, any email confirmation request is unlikely to be successfully routed to them. Some spambots will pass this step by providing a valid email address and use it for validation, mostly via webmail services. Using methods such as security questions are also proven to be effective in curbing posts generated by spambots, as they are usually unable to answer it upon registering.
