Hi, authorise functions should be called in authorize section...only final things should be called in the post-authorize section..what is the sql stuff doing? alan