Conor

First off, yup fully understand about third party stuff.

My .htaccess looks like this

<files php.ini>
Deny from all
</files>

RewriteEngine On

# Don't rewrite any URIs ending with a file extension (ending with .[xxxx])
RewriteCond %{REQUEST_URI} !\.[a-zA-Z]{2,4}$
# Don't rewrite admin directory
RewriteCond %{REQUEST_URI} !^/WHshop@11IA_Admin.* [NC]
# Don't rewrite editors directory
RewriteCond %{REQUEST_URI} !^/editors.* [NC]
# Don't rewrite POS directory
RewriteCond %{REQUEST_URI} !^/pos.* [NC]
# Don't rewrite cPanel directories
RewriteCond %{REQUEST_URI} !/cpanel.* [NC]
RewriteCond %{REQUEST_URI} !/frontend.* [NC]
# Handle all other URIs using Zen Cart (index.php)
RewriteRule (.*) index.php?%{QUERY_STRING} [L]

From your message, are you saying that I have the right code but in the wrong place (i.e. it should appear earlier in the file)?

cheers
Guy