Check this out: http://icant.co.uk/sandbox/maxlength.php When you have a password field with a maxlength attribute and you change the value via JavaScript, you can submit passwords longer than the maximum length in MSIE and Opera. Firefox cuts the password off. I will check Safari later from home. I always knew that maxlength is untrustworthy, it has shifty eyes if you look closer! Chris -- Chris Heilmann Blog: http://www.wait-till-i.com Writing: http://icant.co.uk/ Binaries: http://www.onlinetools.org/