> Are bots submitting it? Does my site have a ghost? Any ideas of what may > be happening or how I can debug? Possibly both. JavaScript is not a way to validate a form exclusively. It is a way to make it more usable - as you don't have to reload the whole page when there is an error - but it is not a security measure. Your ASP needs to validate the fields as well, then you have a chance to stop wrong submissions. -- Chris Heilmann Blog: http://www.wait-till-i.com Writing: http://icant.co.uk/ Binaries: http://www.onlinetools.org/