We really need an improved user registration system. I'd say a good example would be the Invision board registration system.

IPB has the graphic characters for interpreting by registrants tied for keeping the spammers out.

I went onto a phpnuke site where with each login the graphic characters had to be interpreted by users for each login. This feature would be a big help, and probably pretty efficient if the XOOPS read the cookie for "remember me" and the userid and Password filled the appropriate boxes and the the graphic characters had to be re=entered by users on every login.