Hi

I've had the domain and path set in the scripts before and taken out during testing. In fact, I have taken out and added back just about every possible permutation :) Adding them back again seems to make no difference.

Thanks for the reply, I'm investigating the possibility that Apache is not setting the httponly flag at the moment.

Cheers

SquirrelHead