The only way you will see a locked icon is if you run your forum on secure SSL web space.
However, as the user is entering information into a public forum, that other forum users can see, there is little point in running the forum on SSL as all the information given basically becomes in the public domain. It even says in the registration rules on signup:-
When you register you are required to give a small amount of information, much of which is
optional, anything you do give must be considered as becoming public information. |
For security reasons any passwords given are 160 bit one way encrypted, and if you enable the email massager form the email configuration page in the admin area, then email addresses are also never displayed.
However, you also need to make sure if you are running the Access version that the Access database is in a secure location so it can not be downloaded by a hacker. Many hosts supply a 'private' or 'database' directory for this above your web sites root.