Kura: You're right, but sadly, there is not much you can do to protect something where the code is communicating back and forth from user to server. The only secure way I know of doing this is via XML Sockets, which would require a lot more server set up than I am prepared to support in a hack.

I am always looking for new ideas on security, though. :)