I am having a hard time seeing this corss site scripting and how it can allow remote access to a server.. can you fill me in? so i can release a fix - Eric