Oh, and that javascript crap is worth less than no security at all.. since it gives a "false" sense of security. One could simply make a screenshot, or dig the files out of their browser cache.