Well, for older WEP cards i use a completely separate router, so its actually a subnet behind a subnet so it cant see my previous network, I also kill SSID broadcast and use MAC filtering. Seems to work well, or use a router that has DDWRT or some variant that you can setup a login system so once your connected you cant even get net access until you login and establish a session.