in reply to CGI and Password security

How about an environment variable?