thanks, i'm more using the dotnet remoted architecture
so the basic metadataAdapter:
[COLOR=#009900][COLOR=black][B]<metadata_provider>[/B] [/COLOR][/COLOR]
[COLOR=#009900][COLOR=black][B]<adapter_class>[/B][/COLOR][/COLOR]com.lightstreamer.adapters.metadata.LiteralBasedProvider[COLOR=#009900][COLOR=black][B]</adapter_class>[/B][/COLOR][/COLOR]
[COLOR=#009900][COLOR=black][B]</metadata_provider>[/B][/COLOR][/COLOR]
is not recommended in production?
probably the fact that cross domain is enabled, then the sendMessage() without password or such is unsecure.
but in my case, i will not send messages from javascript, they will be processed via other ajax-php script that checks user's authenticated session, it's less complicated than doing twice this job (sessions in apache-php already there, + sessions in lightstreamer metadata).
do you think, using the basic metadataadapter is ok in my case?