Thanks for all the suggestions. I went with the MD5 in a hidden field. Elegant. Looks like my browser client (IE5 on a PC) is sending ^M at end of lines. Once I stripped them, MD5 worked great, though. Just a few extra lines of code. <>< Tim