Not having .htaccess, uh, access would be a pain, but I'll concede that cuts what was apparently my only real potential exploit (the bandwidth throttling thing - it was easy to fix anyway) to shreds. I stand corrected - thanks for straightening me out. My apache configuration/API skillz are degenerating more rapidly than I thought. <sigh> I guess it doesn't matter - apache2 makes them obsolete anyway.