> Is this at all possible? Instinct says no, hope says maybe ;) If the server uses Apache, then use an .htaccess file to deny web access to the CSV file. Very simple. :) If not, then perhaps store the CSV one directory above the web root. FTP can get it, but not a browser. Most hosts provide this ability. Fred