administrative / limited dual accounts & the internet

[BobLewiston]

In Windows XP, in addition to an administrative account, I have a limited account for the internet (to help safeguard against malware).

Should I log off of my administrative account before accessing the net via my limited account?

And is there any way for a website to infect you other than actually going to that website?