>A lot of shops out there use cookies in a fairly in-secure way to encode >user-ids that are picked up on the next request to the store. > >What is to stop someone snooping them and using LWP to hijack user >accounts? Or guessing userids ... Nothing. That is why it is an insecure way. A reasonably knowledgable person can do the same with Netscape, MSIE, or even TELNET. ....Roy