That's very helpful. I guess I'll take the time to refine the CGI::Session implementation considering that it will afford me a bit more security. I guess there is no foolproof way to be totally secure in this situation... but my passwords in this case are not top secret. Good to know about the CC transactions. Thank you very much for your help.