I doubt that you can use re-direct and do what you want, since a re-direct does just that: re-direct the USER to the URL. What you *could* do is get rid of the re-direct and just include('scriptfile.php'); by using ForceType on imagefile.jpg to be application/x-httpd-php Then scriptfile.php can be outside the webtree where it is inaccessible by definition. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php