simple but more secure script v1...