hi, i can think of two ways to do this: 1. using $_SERVER['HTTP_REFERER'], which must be validated to see if it has come from somewhere in your site (eh, this method is not safe according to php manual :D ), 2. creating an additional key, for example, by adding name+id+"a constant value" and using a hash method like md5 to encrypt it and then sending it by url. then on the destination page, you have to make sure that the key can be regenerated with the given name. if it could be regenerated, it means that the given name has come from within your pages... let me know if this solution was useful.. thanks. ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ [Non-text portions of this message have been removed]