Hey, Thanks for replying. ****************** $_REQUEST is a great superglobal, check it out... And at the top of the hijacked script:
while(list($tmp1,$tmp2)=each($_SESSION)) $$tmp1=$tmp2; $tmp1=tmp2=NULL; Could work.. :p **************** Can you tell me what the above does please? (am quite a newbie) and whats the :-p for? plus is that double dollar ($$tmp) a typo? Thanks, -Ryan -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php