This version is deliberately buggy. No, really - it's to prove a point! Only one thing has changed from the previous version: the iframe's CSS, which uses 'display: none' instead of 'visibility: hidden'. On Firefox, remote scripting still works for a GET request, but not for a form-based POST request. On IE6, neither work.