Steve, You are right. I just test it. If users login application sucessfully, then they can see hidden values by view source. Next time they can use URL path ? key = value to open the second form. I will use session to handle it.
By the way, do you write a book "Python Web Programming"? It is on my desk. It's a great book. Thanks, Laya -- http://mail.python.org/mailman/listinfo/python-list
