As a side note, there are a lot of companies/organizations that completely block cookies at the firewall level. As a result, the cookie never makes it to the web browser. If relying strictly on cookies for authentication, on every page, the user must re-authenticate. Jody -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php