So we had a customer manage to check out with a bogus e-mail earlier today, and since (3 hours) I've received about 300 e-mail order confirmations to the BCC address I have configured for that order.
I think I've managed to squash it, but the method I used is not desirable at all, as I went through every table and replaced his bad e-mail with a known good one... but this isn't desirable behavior!
How can I squash it?