ie, for user joe@somewhere, make joe1234 the real user , and joe@ an alias, then people won't be guessing user accounts from links on web pages ;) gsh