id assume that the !creative command would only do the same as the other one, just coded differently as its a command, after removing the NEI i haven't had any more problems with anyone getting into creative, so it is definitely just through NEI.
Edit: I know its probably through NEI, because the maker of that command client. Hihihi, came onto my server and after checking the NEIServer config. that name was there.