Javascript - manipulate forms in an iframe

I'm trying to get a proof-of-concept for a project that I want to do. Essentially, I want a big page, with lots of embedded iframes (think socialmarker) but with a twist.? I want the master frame to AT LEAST be able to read out of the sub-iframes, and preferably write to them. The goal of this isn't to maliciously misuse the websites involved, but rather to extract certain information from them without the user being able to tamper with them. Since I plan on using this project with traffic exchanges, I'd like the prototype code to be able to log into? **[[login to view URL]][1]? that will take care of the write side (fill in username, password + submit on upper (horiz_login) login bar). For reading, the JS should navigate to? **<[login to view URL]> (will only work after login) and read the value from the text input named? "ref", and return the portion after ?ref= (essentially, your refer id).? This should be accessable in the "main" DOM (for printing, sending via AJAX, or whatever else)** A use case for this would be if we want to get the referer ID for user "bob", but the user (who is malicious) wants to try to give us the username for "joe" (essentially, making false accounts at the 3rd party sites just to promote his one "real" account).? ** ## Deliverables There's a mockup of a basic page with 2 buttons (for read and write) at? <[login to view URL]> Please use that as a basis, completely replacing the content of the "content" div as you see fit. For the "write" button, it should perform a login (you'll need to sign up for your own free account to test this by you; the final deliverables can have dummy credentials which I can switch with my own) and that's it. For the "read" button, it should go to the URL with the referal URL, extract the referal URL, and in the "footer" div write "Your ID is " + the referer id extracted.? The "content" must stay inside an iframe/div so I can have multiple websites in iframes in the one page (like socialmarker does) This must all be done in JS (no server-side processing, no plugins, all browsers)