I am using a fancybox iframe to display the page, but that should not effect the security. The only information I want from the contact form is first and last name and email address. I set everything else to an empty string. I also don't want an option with which list. trying to seet that to a fixed value.