Indeed! It could offer a potential exploit. I have released a patched version here: http://www.dwalker.co.uk/forum/viewtopic.php?t=493 Firewall1954 (at) hotmail (dot) com - it is/would have been good practice to contact the developer (me) before publishing your find. If you had approached me with the find like Philipp Niedziela did so a few months ago you would have received public credit for the find: http://www.dwalker.co.uk/forum/viewtopic.php?t=517
