Quoting avsm@horde.org <avsm@horde.org>: > Run the return value of Registry::callByPackage() through htmlspecialchars(), > which will take care of entificating (nice word!) the ampersands. Should this be done for invokeByPackage() as well? -chuck -- "Because of your melodic nature, the moonlight never misses an appointment." - fortune cookie