Folks you have an exploit in your code for locked out users, if they still have the activation email they can unlock the account again.
Regards
Dave.