> > How so? With cURL I can simulate any form submission... > > http://curl.haxx.se/ Or using mozilla's developer toolbar one can inject javascript, or with mozilla's firebug extension one can change the values of your hidden fields. I guess it is possible to write a wrapper which uses firebug and automates the submission. ala a bot! bottom line: never trust the client side HTH, -- Volkan Ozcelik +>Yep! I'm blogging! : http://www.volkanozcelik.com/cre8/blog/ +> Going solo in Turkish: http://www.volkanozcelik.com/donkisot/ +> My projects/studies/trials/errors : http://www.sarmal.com/ +> Sardalya JavaScript Library: http://www.sarmal.com/sardalya/