I think we can mark this closed. As for anyone trying what I was, Don't waste the effort. I looked at the security of the I-frame issue and was amazed at what I found. Along with the Paypal ISP issues, it's not worth your time.

Guy