Well

I figured as much.

Also, it doesn't matter if I hide the source code because they can see the path to db.cgi when a search is conducted.

Anyway, ther reason I ask is a professional security dude (we call em hackers) said that the site was insecure and he could easily change the database if he wanted.

So, now I am panicked because my client is panicked and I don't know what to do about it.

Cheers,

micchicken

P.S - an inflatible dartboard huh?