Or... he didn't even login and the widget already was logging the IP when he opened the page? Either way I agree though.