in reply to CGI + password problems

So, if I understand correctly, when you insert the code that displays the error message, it displays the error message. You might want to think about the logic of your code: if the error message is displayed you might want your code to display a different page, or perhaps redirect the user back to the original login page.

If you are using mod_perl you could look at using the Apache::Auth* modules to help you, otherwise you could look into htaccess files.

(If you're not using Apache, perhaps you should mention it, and some other monks may have pertinent advice).

rdfield