Having the noncgi inside the cgi isn't exactly a security issue (in fact, in some configurations it helps security)... it's just an unusual setup. There's nothing really wrong with it, just that it's not often done. (I usually place my cgi inside my noncgi, actually... <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" /> )
Netscape 6 handles refreshes differently - instead of waiting for the page to load, then refreshing, it sees the meta refresh tag then forwards after the specified delay, even if the page isn't done loading. This is the first reported instance of user problems with the refresh, and I'll look into it...
In the mean time, have Carla and co. hit the Stop button in Netscape, count to ten, then try clicking the link.
------------------
Charles Capps, Moderator, Post-Install Troubleshooting
PLEASE NOTE: Due to time limitations, I do not provide UBB support via email.