Safest way to have your members directory is under your web root, where it'll never be accessable to the web. Ask your webhost if they can create a directory under your public_html directory called members, be sure they chmod it 777, then move your members info there. Thats what I'd do anyway <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" /> ; it's what I did for Ian there lol...