Finally, to answer iru786's question, yes we pay old balances after there has been no activity for a while. However, we also are happy to make payments upon request. Ideally we would like to have a 'pay me now' button on the website, but with the chance for abuse, especially given the recent spike in unfriendly traffic, we've yet been able to come up with a comfortable way to achieve this. I'm certainly open to suggestions on this topic, btw.
You could require a signed message to confirm the ownership of the address. Wouldn't work with exchanges or other shared wallets, but anyone who's using that for pool earnings is asking for trouble anyway.
You could also restrict manual withdrawals to once every 24-48 hours, this would not prevent abuse but would at least limit damage.
That is a good idea. I like it.
My Hash rates showing about 30% to 40% low on Pool User Stats page but then I log in and check my miners they look fine?
The hashrate goes off the shares you submitted the last 10 minutes I think...but the graphs have always been a wee bit off. Check the hashrate in the big graph and see if its normal.