On Mon, 2003-09-15 at 11:48, Passin, Tom wrote: [snip]
If you want the pages to appear only within their intended frame, a user with the right browser can easily defeat that intention unless you enforce it using javascript in the page.
Which isn't secure at all, since someone who is really dedicated would just fire up curl, wget, lynx, etc (insert tool of choice here) to attempt to grab whatever they want anyway, bypassing any javascript on the page. -- Edward Muller - http://www.interlix.com - "Open Source Specialists" Dedicated Zope Hosting - Web Hosting - Open Source Consulting Network & PC Service & Support - Custom Programming Phone: 417-862-0573 - Cell: 417-844-2435 - Fax: 417-862-0572 Jabber: edwardam@jabber.interlix.com - AIM: edwardam453 - ICQ: 287033