Whichever way you choose, make sure you verify permissions on the server as 
well -- don't rely on not presenting the link to the client as a form of 
security.

Reply via email to