I use PHP. My swf is a kprotect-generated swf where I embedded a loader.xml which only contains one instruction, which in turn loads a php path from my server. The php then generates the xml dynamically based on session variables, server variables, etc. I believe this is the most flexible solution if you know how to do it, since there are things you can't do (or at least not easily) with krpano's scripting...