How easy is it for someone to hack the loadvars of a swf running in their browser? I currently pass in the userid through loadvars…
Should I move that to my socket connection, or is it somewhat safe? Btw, this is just for a game, so the most they could do is screw up their friends scores…