I know, but only a few of us have this option of using htaccess. My provider does not allow the use of such scripts - well I also have no bandwidth limit. If my provider thinks this appropriate, so be it. If I had a bandwidth-limit, I would use htaccess. Java-scripts do keep those who have no idea about html or java-script from getting to your files. But CGI-Scripts are admittedly better. Joerg