In signup.php, we have: require "inc/lib.inc"; @include "$header"; and at the base of the include file we see: $header = "../header.php"; While I haven't bothered to actually install the software, this sure looks bogus to me. George -- theall at tenablesecurity.com