adammc - 5:55 am on Jul 29, 2008 (gmt 0)

Thanks for the great advice eelixduppy :)

"Will always be the same. I would at least generate 2 random numbers between, say, 1 and 10 and sum them, then pass the actual sum in a session variable and check it here. This will be a little more secure than what you currently have in place. :)"

So you mean to not get user input, perform as a hidden input?