xp_cmdshell is such a dangerous extention that we've removed it from the SQL servers.

This sounds nice, but it is very dangerous for any web application.

Dave

Sr. Software Engineer - http://www.geeks.com