Thats good, i was thinking about doing it that way or similar. Its easier.
I'm a little concerned about security, isn't this way more susceptible to an SQL injection attack?
I guess i should check for entered characters before all this then.
They have to log on to use this function anyway, so i'm not too worried about it being wHacked.
Its far too early in the morning.
Thanx again for all your help Pyrox.