Rob I suspect that this is not at all what your client means. If you have a list of links, and you don't want anyone to be able to trawl your site and harvest them, I suppose you could keep them in a database. Then, all your links would look like: /links.asp?id=39275. The page links.asp would "authenticate" the user (conventionally I suppose via the page referrer, although really this is no authentication at all with the assistance of an HTTP proxy) and if the user is deemed to be worthy of the link they will be redirected to the link from the database (hence the id in the querystring). HTH Regards Chris Marsh "Cthulhu for President. Why vote for a lesser evil?" --Cthulhu.org