I think that is where I eventually found the missing link and then saw that the software I was using was using UTF-8. Now I just need to figure out how to escape out of an iframe when redirecting...a ny ideas :)?...

Thanks for responding. I have found the problem after 4 days of intense irritation! It was BOM - I needed to set the code not to use charset=utf-8. Thanks awfully for being prepared to assist....

I've been going around in circles for days on this. I developed over 200 pages of code in a software package and have written the Login scripts in PHP. On about 100 pages are 3 hotlinks in iframe - some which may only be accessed if logged in. If I add php code to the top of the pages to be protected to redirect if not logged in, I get the famous headers already sent error. If I put the same code on a separate page (page1), all is well. There...