X-Git-Url: http://git.pjr.cc/?p=ga4php.git;a=blobdiff_plain;f=doco%2Freadme.txt;fp=doco%2Freadme.txt;h=54c6912e4adb24ce80784c8573d338bc5036e2b7;hp=75bd4acd4a71a949be696d51c8b95fa54f9450db;hb=3d4474b6139a576914e18033ccbcbee432889ebd;hpb=56b0dc03375e2a8facb8ff20c05d9be07dd6bcda

diff --git a/doco/readme.txt b/doco/readme.txt
index 75bd4ac..54c6912 100644
--- a/doco/readme.txt
+++ b/doco/readme.txt
@@ -21,6 +21,18 @@ codes. But looking at the App's available for smartphones
 that fullfilled some realistic criteria - easy to use, easy to
 provision.
 
+READ THIS BIT
+=============
+
+in the example page, i send a url off to google charts to create
+the QRCode. NEVER EVER EVER EVER EVER do this. I do it cause for
+the example it doesnt matter, and if i find a better way of doing
+it i'll do it. BUT creating a qrcode on a page aint terribly easy.
+The point is, that QR code is a URL containing the tokens SECRET
+KEY and should remain secret. You can generate qrcodes anyway you
+like, BUT MAKE SURE ITS SECURE (i.e. never save them on the FS,
+and send them all over ssl).
+
 
 How?
 ====