the javascript protection scripts aren't THAT bad. one day i was reading a post about this, so i went out and searched for sites offering free javascript password protection scripts. most i could break, but i found the only strong ones were the ones that have the password constant. it's not as easy as just looking at the sorce code (wich can be view under ANY sercunstances) becuase the password is part of a file name, usualy the file name of a .js file. this file has information in witch is needed to get past the protection...