As this is a security thing it would be great if others would take a look at because we want to be extra sure there is no obvious security hole in this.

Cheers, Erik Jan