The *if* statement should fail with the password abcdef being qualified but it never fails ? If I understand the expression right, it should have at 1 number in it between 2 letters ? $password = abcdef; if (preg_match ("/[A-z]+[0-9]+[A-z]+/", $password)) { die ("You must have a number between 2 letters in your password ... 0-9"); } Larry Sandwick Sarreid, Ltd. Network/System Administrator phone: (252) 291-1414 x223 fax : (252) 237-1592 _____ My Inbox is protected by SPAMfighter 2224 spam mails have been blocked so far. Download free SPAMfighter <http://www.spamfighter.com/> today!