HM, you're right even if he used cURL or fsocket to check for the existance of a host file or ID number these can still be passed on, i suppose the only way would be to implement that and make sure that it was IP specific but is his content THAT valuable to go to all that trouble and P**s his users off because they always have to be at the PC they registered with to download stuff? i think not