Earlier quoted context omitted.
who matters most now (i mean)
For a flash based implementation all you have to know is: #1 Anyone can dissect a swf file and read your code . #2 Own your swf files.This means ,make sure that your server side script runs/executes only if the swf file resides in your trusted domain. For a voting system, some kind of IP based check is a basic necessity. Business2.0 didn't even care to implement it.Aint that lame?
codeLullaby - looking for a job? we can always use a good hacker... let me know michael@justin.tv