All pages at the website below have had a message added at the top of the page along the lines : "Dear admin, you have a huge vulnerability. Email me: xxxx@gmail.com -xxxx twitter.com/xxxx" It's 'a friends' site. I do not know enough about such things to know what the security issue is that allowed this. Someone here may be immediate;y aware of what is involved. Any advice welcome. I've emailed the owner advising them to NOT contact the "greyhat" as there is no guarantee they are benign (the greyhat title is not a comforting start). Obviously they could have trashed the site, but didn't, but it would be very good to put things to rights asap. Typical page is at (refold) http:// americanlightworks ..com /photos/ Contact me off or on list as appropriate. thanks Russell --=20 http://www.piclist.com/techref/piclist PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist .