I have committed a patch for fe_adminLib.inc to both Trunk and TYPO3_4-0. For details about the issue (it was announced three weeks ago), see here: http://typo3.org/teams/security/security-bulletins/typo3-20061010-1/ - michael -- Use a newsreader! Check out http://typo3.org/community/mailing-lists/use-a-news-reader/