>Yes. It's using the global arrays HTTP_POST_VARS and HTTP_SESSION_VARS >arrays, and 4.3.x has the directive register_globals set to off by default. It's safer to leave it off. You can easily update the script by replacing these with $_POST and $_SESSION, respectively. Again I appreciate the pointer. I also changed the $HTTP_SERVER_VARS to $_SERVER and it still didn't work. I then went through the script and checked for where it was trying to register the global user name and it was assuming that the global vars was turned on. Changed the line to read: // $adb_password = $admin_password; // $user = $u_name; $_SESSION['adb_password'] = $admin_password; $_SESSION['user'] = $u_name; And it works now. Thanks piles for the help. Regards Matthew -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php