What is the best-practice way to disable antispam and antivirus checks by default, and only enable it for the users in $sql_select_policy ? Thanks. -- Tom Sommer