Cap-talk, I also did some editing on the Confused deputy problem page in Wikipedia to include the cross-site request forgery example. I find it pretty compelling and think perhaps others might also find it helpful in addition to the passwd (SUID) example. --Jed http://www.webstart.com/jed/