compiler ~ re: "Now, what did I do wrong exactly ?" In the links you provided you had included Form.sess_id & Form.sess_key details. I can't say I understand the nitty-gritty of the whole issue, but basically (I think!) it involves identifying your personal user session within the SQL database - if someone else follows that link with those details in it, they could theoretically be identified as you, by the database. Don't quote me on this, I could have it a bit skewed, but that was my understanding of why those Form.sess_id & Form.sess_key thingies shouldn't be in the links provided to others. :-)>