loadVariables only from my server

[JoshuaJonah]

@forwardtrends

If the form is never mentioned (ie the_form.php) inside flash - how will an “injector” be able to mimic a form call? (Not to mention without knowing what the form variables are)

As long as the PHP page is not displaying the information. If it’s just pulling into flash, your pretty secure. Unless you use a decompressor.