Hmm ironically ive already tried that. It doesn't return a null value, but it returns the encrypted string that is in the database. It then puts that string into my reglist file. If i could somehow decrypt $row[user_password] then this would be perfect. I believe i understand the problem now though. The index.php is being reopened when the user activates, so the file is opened up and there is no value for $user_password.....i think. Any other ideas?