> restrict the cgi-bin from viewing but can still use it to run cgi's and pl programs? In 2.4, the contents of cgi-bin are not directly visible, only their output is served, as long as you use the default location (NOT under the webpages directory) and don't set any aliases to it. Don't set "Allow file mixing?" in the CGI settings, if you can possibly help it. -PRR