Sometimes it is good to get a heads up. This one is on the WP forums, addressing wp-mail.php not sanitizing inputs. It's used when you post by email. -=john andrews http://www.seo-fun.com