Dear An, > Referrer: <script>alert(1)</script> Yes, but... seems not all echo's get a Referer passed to them. Cheers, Paul Paul Szabo psz@xxxxxxxxxxxxxxxxx http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia