Does anyone have a recommended protection implementation for a dir that only has .cgi files? Most of my site is php and I use have been using the php_include option very successfully there. But obviosly this method will not work here. Appreciate any input? --tradermike