Joerg: IMHO, it is impossible to protect something on a webs site by JavaScript. In case someone has "disabled" the right mouse click, you simply can look at the source code (unter "Ansicht -> Quellcode" :) and copy the path of the picture. Some servers are not protected from getting a directory listing even! But the method with the .htacess-file works, as I can tell you. I loaded one up to my root directory - and voilno more picture rapture (ok, you still can grab the pics when on the site, but not from a single link to the pic only). Willy