Sure would like to be able to afford a bounty on a Ruby (framework agnostic) OWASP ESAPI. http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API MarkT -- ¥΅¥ΓΆγ¥ςξημε It's a Jingle Out There!