Just an update...
Andreas has been actively discussing with beta testers security measures that can be put in place in the game. Some good ideas are being brought up and I am very encouraged by what I've been reading so far. For those of you that I don't host at AllSimBaseball, here is pretty much what has been my website security bible:
How to prevent your website from getting hacked. Repair damaged site.
I know it's a lot of reading and most may not want to be bothered, but on the odd chance that some commissioners have some interest in knowing a little more about website security, there it is.
Roger, I've sent you and your league members an email. Thanks to Randy, I found what had been eluding us all this time.