Nevermind a user being able to submit some arbritary name for a class,if you have some body loading classes on your appserver I think youhave bigger fish to worry about.