>>>>> "H" == Harry Ohlsen <harryo / zipworld.com.au> writes: H> No ... trust me :-). I'm writing a web based program and I want to use H> the normal user names and passwords for validation purposes. I can H> encrypt the password, but I need to have something to compare it against. H> Maybe there's another way to it that I'm unaware of. Any suggestions? Well, generally the authentification is done by the www server, i.e. configure your server to have passwd protected page and don't put authentification in your application I'm not really sure that it's a good idea to have the same uid/passwd for an un*x account and a www access Guy Decoux