Perhaps, with the correct user permissions applied to the BE user, the FileList module could be allowed to wander off the webroot path? I've little scope as to the potentially negative ramifications of this, but it might be a worthwhile stopgap? Regards, Denyer ------- http://gallery.denyerec.co.uk