On Thursday 12 January 2006 17:21, simon dray (BITS) wrote: > we are trying create regex to prevent access to specifc area > > Eg:- acl xxxx_web url_regex -i ^http://www.xxx.xxx.xx/another level/ > > If the url includes www.xxx.xxx.xx/anotherlevel// please note the double > // this doesn't match the regex and therefore bypasses the acl is there > anyway I can use regex / acl to catch this type of malformation. Use /+ instead of /. Besides if the URL really is like http://www.xxx.xxx.xx/anotherlevel////// then this will still match your regular expression because you don't tell the expression that it ends expliticly after that ($). By the way... please escape the dots like: ^http://www\.xxx\.xxx\.xx/+another_level/ Christoph -- Never trust a system administrator who wears a tie and suit.