sarah wrote: > > Ok, then just to double check. > > If www.domain.com sets a cookie, something.domain.com > can read it? Maybe, maybe not :-) it's up to the programmer who creates the cookie and specifies (or fails to specify) the DOMAIN and PATH. For more detail, see: An old Netscape cookie reference: http://developer.netscape.com/docs/manuals/js/client/jsref/cookies.htm RFC 2068 - Hypertext Transfer Protocol -- HTTP/1.1 http://info.internet.isi.edu/in-notes/rfc/files/rfc2068.txt RFC 2109 - HTTP State Management Mechanism http://info.internet.isi.edu/in-notes/rfc/files/rfc2109.txt -- H* Hassan Schroeder ----------------------------- hassan at webtuitive.com Webtuitive Design ---(+1) 408-938-0567 --- http://www.webtuitive.com -- creating dynamic Web sites and applications since 1994 --