🚀 go-pugleaf

The answer really depends on what you intend to do with the results.  If
users are just playing for fun, bundling everything into the client poses no
security issues.  If, on the other hand, there is some benefit to winning
(e.g. an online points tally showing the top 10 players) then you need to
maintain the entire state on the server and have the applet present the
state to the user; you can't trust the client to preserve the state because
doing so would open you up to hacking as you have just described.  The
requests to the host to update the state (e.g. split, hit, stand, etc.)
could be done through HTTP, Web Services, or (if you're really masochistic)
EJB access.  The host would take the request, match it to the internal
state, update the state, and return the updated state to the client.
--
Check out our latest white papers at
http://www.datadevelopment.com/papers/index.html

BladeNET Scores With Borland Enterprise Tools
Team Development with JBuilder and Borland Enterprise Server

Dolphin Data Development Ltd.
http://www.datadevelopment.com/