Str0ke, what's the difference between milw0rm 5013 and 5023? Both cover a SQL injection issue in AdServe's adclick.php script involving the id parameter. George -- theall at tenablesecurity.com