[rtpswebsite]

Lynne,

I wonder if you can help?

You solution removes the link to the members list, but still does not stop people from accessing it..

All people need to know is the name of the page. i.e showgroups.php
If they know that, and append it to the url, they can access the list of members regardless of if they are registered/unregistered, allowed or not allowed to view it.

I found this out because a user did a search on Google and accessed the members list right off the bat. Now my users are moaning about privacy

Any ideas how to plug this hole?

Cheers

Chris