Hey so I have a quick question. On my site I have a button that the user clicks, which then pops up a new small window with my flash application embedded in it. Now, this flash application has certain parameters that it needs such as username and password amongst other things. Now, I can pass that through the URL of course but I'm wondering what the best practices are? Because I don't want to have the username and password to actually be visible in the URL.