On Thu, 11 Aug 2005, Brian O'Connor wrote: > So what you're saying is if I see a "?PHPSESSID=xxxxxxxxxxxx" in the URL of > my site, than it is vulnerable? Yeah. --- David Mintz http://davidmintz.org/