BA> One Solution: BA> The password change can only be activated BA> once per day. Now it takes 1,000,000 days BA> for the HI to try his attack. Other Solution: Unique (random) URL for every attmept. Vlad. -- Best regards, Vlad mailto:vlad@novsu.ac.ru