"I solved it by requiring an email application process by disallowing the username "*". "
process AND by disallowing ?
Just trying to make sure.
Also one of the reasons I wanted to have someone else host the script is for script updates which assumably would be done by a competent hoster.
Does that make sense?
Yes, I disallowed all new users till they wrote me and ASKED. Then I would turn off the filter for a day, and reset it after the "Open Enrollment Day" ended.