On Tue, 28 Aug 2001, Andrew Bartlett wrote: > Of course. Sorry I wasn't thinking about the whole 'client supplied > input' side of things. Would you agree with checking for the $ and if > it isn't a machine account being created to deny & log it? yes.