On Fri, Sep 26, 2008 at 7:17 AM, Waynn Lue <waynnlue@xxxxxxxxx> wrote: > This may be more a general HTML question, so let me know if I should post > somewhere else. > > I was hoping to do some logic in a script, and then pass the results of > that > script to an iframe for more processing. Is it secure to include those > variables as get parameters to the iframe, though? In other words, if I > have something like this: > > <iframe src="http://example.com/?accesseverything=true"> > > where I use PHP to generate the src for the iframe. Could someone just use > Firebug or something to set that variable? Is there a better way of > passing > it instead? > > Thanks, > Waynn > sessions? -- Bastien Cat, the other other white meat