I''ve been reading the authentication tutorials and there''s a bit of an argument about using md5 vs. sha. What is the session id - md5? Is there any reason to be concerned about session id collisions (or any other attacks)? thanks csn __________________________________ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com