Zarzal, after reading up on Mpack, I believe you are correct. It sure irks me that tech support for hosts would not be aware of this issue. Instead they waste my time and ramble on and on about how I must have an insecure script when it is them that is insecure.