I've run into this before.  Some people just have problems groking things
like:

1) Client-side scripts can never be hidden.

2) Online forms are filled out on your own machine, not on a web server, so
they are secure even if not pulled from an encrypted URL as long as they are
submitted via SSL.

3) Images and files are downloaded to your machine before they are
displayed, so the user always has a copy.

...etc...I am sure everyone has similar was stories of things that the
clients just can't get a handle on.  It's not all that surprising to me that
there are also people building web sites who haven't grasped it all yet,
too.

D

----- Original Message -----
From: "Mike Taylor" <lonewolf(at)one.net>


In a word:  WOW.  I didn't even notice that he'd also stored the username
and passwords there.  I had to look at it several times to make sure I
wasn't seeing things or that it was some kind of joke....I mean, no one who
knew what they were doing would store sensitive data like that in a
JavaScript or HTML file, would they?!?!?!  But there it is.   Amazing....and
scary.

• Web Designer Courses
• Off the Shelf Training Courses

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA