For a flash based implementation all you have to know is: #1 Anyone can dissect a swf file and read your code . #2 Own your swf files.This means ,make sure

For a flash based implementation all you have to know is: #1 Anyone can dissect a swf file and read your code . #2 Own your swf files.This means ,make sure that your server side script runs/executes only if the swf file resides in your trusted domain. For a voting system, some kind of IP based check is a basic necessity. Business2.0 didn't even care to implement it.Aint that lame?