Came across this today and thought it might be of interest. Some food for thought at the very least. http://vimeo.com/11213607 Note that the whole scenario starts with a lack of adequate MySQL escaping. The smallest vulnerability can lead to a massive intrusion. -Stuart -- Stuart Dallas 3ft9 Ltd http://3ft9.com/