> None of my scripts do any file uploading (to the server). None. That's not really relevant. There are plenty of ways to exploit poorly written scripts. You need to have someone look at the scripts and fix the security issues. > I still don't know how I can tell what permissions the web server has. Just ftp to your server and list the files in the long format. The listing should show ownership and permission settings. -- http://yosemitenews.info/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php