exploited

I caught users on my forum exploiting the username change item so they can use it an infinite amount of times. What they do is click Configure, put in the name they want, and leave the page as it's loading. This changes their username, but the item isn't mark as configured, so it lets them do...