For a flash based implementation all you have to know is:

#1 Anyone can dissect a swf file and read your code .

#2 Own your swf files.This means ,make sure that your server side script runs/executes only if the swf file resides in your trusted domain.

For a voting system, some kind of IP based check is a basic necessity. Business2.0 didn't even care to implement it.Aint that lame?

codeLullaby - looking for a job? we can always use a good hacker... let me know [email protected]