This has been assigned, CVE-2006-0871 on http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-0871 http://secunia.com/advisories/18935/ has some interesting details and the requirement for "magic_quotes_gpc" is disabled for the Mambo SQL Injection and File Inclusion Vulnerabilities. While Mambo and VBulletin do suffer from vulnerabilities, (probably once per year), they have a better security record than phpbb/phpnuke which have vulnerabilities/incidents upto 4 times per year. Some hosts ban phpbb from their servers. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com