[snip] This seems the easiest for me: - Determine IP address of Server A. - At Server B: <?php if ($_SERVER['REMOTE_ADDR'] != SERVER_A_IP) { die('Get lost, will you.'); } .... rest of code ... How's that? You could, of course, still add the md5 check, which sounds pretty good. HTH Ivo [/snip] Then some one with an account on that server can also do the same thing :) A combination is probably the best... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php