Okay, that makes sense. I guess the bar's a little higher for vandals anyway since it requires some programming knowledge.

On a similar note, is any of the code run on the server side? If so, how do you prevent DoS attacks? Are there checks in place to make sure that I don't create an infinite loop or allocate a ridiculous amount of memory?