I want to generate a complicated graph, on the fly in php and use it in an <img> tag. No problem; <img src="generate_graph.php">. My problem is, I want to generate a graph of some confidential (financial) information, and I want the graph to be secure. The variables to create the graph are embedded in the calling .php program (the <img> tag is generated by a php program that captured the financial information). I'd like to just pass the variables to the "generate_graph.php" program, but how? I don't trust cookies, partly because the app is crossreferenced with a VXML and WML app. Using a database would require the generate_graph.php program to know what data to pull, which requires passing a unique id of some sort which may defeat the security.
Any ideas?
