[dvongrad]

That certainly makes sense and I appreciate your comments. Rather than disabling security outright, is it possible to disable security for a single read-only user and then enable it upon an auto login or would such changes still be prone to attacks? Another approach might be to pass a query string not containing user/password info to vBulletin and then modifying index.php to check for the query string and populate the user/password fields and click the login button (possibly through JavaScript) if there's a match. The Windows application where this URL and query string would come from if fully secured and thus no login info would have to be passed.