>> Yes, you're right. There can be breaking changes like that even in XP
>> once the support expires. Fortunately VFP is quite simple in general, so
>> most security changes should not affect it. Unfortunately, security
>> changes are totally weird so the ony we can expect is the unexpected. < BG >

I think the biggest risk area are interop scenarios. Calling COM or .NET components from VFP, or Web or Indigo Services is probably much more at risk than opening a plain VFP form.

Markus