Not sure what happened during the upgrade, but both work now. Thanks for your help.
Two more questions.
1. Even after implementing captcha and user approval process there's no guarantee that the new user is not a spammer. Is there an option to require a user's first post to be approved? I was able to find settings where all posts have to be approved or none.
We did this on our forum. The default user group for newly registered members is Users. We placed the group in moderation. We created a new group named Members. To join that group, you have to four approved posts. (That's configurable.) So, when a new person registers, they are automatically placed in moderation until they have had four posts approved. Members of the Users group also cannot post HTML, cannot have a signature, cannot view the members list, and cannot send private messages. All of these are configurable in the Group Permissions.
