You guys really need to keep your game login different from your forum ID.
The only thing a person has to do is check this page below...then just go down the member list on these forums and check if the ID is taken. If it is then they try a pw.
http://www.silkroadonline.net/member/member_join2.asp
Some people even use the same email AND game login for these forums.
I tested it out just to see and theres some people on these forums where I've gotten to their secret question. All someone has to do is figure out your secret question or use a program to guess it . Then you are owned.