> And how do I know what the web server can do? The web server *executes* PHP scripts. Most likely one or more of those scripts has a bug that was used to write files into your document tree. Your document tree should not be writable but most likely is. -- http://www.spinics.net/lists/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php