So what ? Even with register_globals = On it ends with a PHP error, nothing more. Where's your exploit? There's nothing on your site. I may have missed something and I'd like to thank you to warn us before the reste of the world. -- Olivier Meunier