I agree, that is why I called it "partially a security fix" because it resolves an inconsistency in the behaviour of aliases and identifiers that has been around ever since the scripting language was created. However it is not a security fix in the sense that it fixes something that is exploitable or that would technically be called security issue. It is a quirk of the scripting language, of which there are many, that a scripter has to be aware of. If it was an actual security issue, I would be leaving the change in. Thanks for your comments on this topic everyone.