[Chuck S]

I show the code in showgallery.php as correct

if ( isset($_GET['catp']) ) {
@setcookie( "catp", $_GET['catp'], 0, "{$Globals['cookie_path']}", $Globals['domain_path'] );
$GLOBALS[catp] = $_GET['catp'];
}


$catp is never a post item. Basically what we say there is if there is a catp variable in the url reset the cookie to that get which overwrites the catp password