I noticed a while back on my server logs it looks like there's an injection hack going around which makes an undeletable post. Not sure what forum systems are effect, I suspect it may have been patched, but it's probably worth checking the 0-day exploit sites for what's going around. Also might be worth chucking the posting page on SSL, the certification push and pull will certainly scupper a few script kiddies.