if you can tell your users to lower their security settings, XMLHTTP can do client-side GET and POST to any URL via http.