andy1234:
rambo has explained exactly, why I need an iFrame - not to reload header flash every time.
Regarding SSL - the solution could be to use just a simple no-frame structure for secure pages. Just use a different template for those pages
ever consider loading the zen cart pages dynamically into a single flash _root? the _root doesnt have to be flashy; it can just be a blank white space that loads as fast as, well, a blank white space. but then you wouldn't have any visitors. the point is that you CAN be a minimalist AND a flash user.
that would meet your first objective. loading the flash file into a secure page would move toward accomplishing the second. although if you were going to go with that solution, there's quite a bit of overhead, depending on how you get flash to communicate with mySQL and apache. here you have several choices, including an xml socket connection to loadvars to amfphp.
you could even connect flash to a jabber comm server and have sexy operators hold live video conferences with your customers as they browse your zen cart. i think this is what ebay's intent was with the skype acquisition (unsure about the sexy operator part).
may i ask what kind of site or application this is?