Hello guys, I'm trying to get an ajax-enabled script running as the main content for one of my pages (www.mogos.net/drupal/exp.php for now, will become the frontpage if it works).

Two main issues:

When the script is outside of drupal (www.mogos.net/exp/), it automatically refreshes every few seconds. Inside drupal, it never refreshes (possibly because the page isn't labeled as <?xml...). Is there a way to get it to refresh?

Currently, I've set it up as an iframe instead. However, this hits an issue that it is run independently of the drupal environment, and thus I cannot confirm their userid (I could send it via get or post, but even the least skilled hacker could easily pose as someone else). I guess I could send both userid and md5'ed password, but I would rather prefer a non-iframe implementation at all. That is, have the page as a "create content"->"php page".

Any help would be appreciated. Thanks.