I thought it was a valid question. It just so happens that I have copied across someone's old website over to my webserver yesterday. There is an old non-PHP webform on it, that hasn't been updated in probably 4 years. If I replace it with a piece of PHP code, that I find on the internet, just how do I know that it's safe/secure? Kev