> Or you could add some code to, say, > remember the IP a session was started from and check to make sure > it's the same IP asking for it again later. The code is already there: see WASessionProtector ;-) Lukas -- Lukas Renggli http://www.lukas-renggli.ch