You might want to read the entire thread first. Of course it was sent via DP... If you allow users to send emails to your email address in your CP, I could just as easily email you as well, via DP. That's the way VB works. It is not a hack. The problem however with this particular event is that a bot was obviously used to exploit this capability in VB. No hack here... Pays to read a thread first