Now that I have your attention… Of course everyone knows there’s no 100% sure way to hide HTML and JavaScript short of disabling Right click, that is 
I believe I have come up with a method of hiding that is far more challenging than any other you have ever seen. No one has yet to crack it.
I would like to invite you all to try and find the code at
http://hideit.siteexperts.com/
Spam what?
ok here it is
<script>
var HashEncode = 0x95B8340938DA4B2E949BE87B34D6B3A7;
var EncodeHash = 0;
for(var i=0;i<String(HashEncode).length;i++)
EncodeHash += HashEncode%7;
</script>
<script>
bod.attachEvent(“oncontextmenu”,function(e){alert(“This is just here to annoy you. \r
\r
\r
I wonder how the 133t h4xor script kiddies protect their Scripts from Apple Users?”);e.returnValue=false;});
try{if(document.namespaces[0].urn==“urn:p46050”)document.write(“<scrip” + “t id=‘wtf’ src=‘hidden.asp?pass=95B8340938DA4B2E949BE87B34D6B3A7’></scr” + “ipt>”);}catch(ex){alert(“Sorry, IE6 Only”);}
</script>
Debs
I’m sorry you feel that way, I’m not selling anything. True this is my only post here (I’ve been trolling a lot of fourms today) I am doing this for fun and I encourage you to try your hand at cracking it.
Not quite, the hidden code contains an alert()
You’re doing something weird here, since the page never loads fully… and I notice you’re using ASP, so perhaps you’re fiddling it in ASP?
And the script must have something to do with the XML namespace you import.
Impressive, though.
I can’t tell you anything more than that its an IE Bug.
Thank you!
Righto, and that’s why there’s an alert in the page code saying that only Internet Explorer can access it. 
Heh, just tried to open your hidden.asp file and received your “You didn’t really expect that to work, did you?” message. 
I know you’re fiddling with something in that urn: p43166 XML namespace, but I have distinct feeling that you ain’t gonna spill the beans.
You said find an alert within the javascript, there is an alert within that javascript I posted. You didn’t say what the alert had to say.
<html xmlns:qxf53e="urn:p7662"><head>
<style>body{font:normal 9pt Verdana;}</style></head>
<body id="bod">
<a href="http://siteexperts.com"><img align="left" border="0" height="104" width="170" src="http://siteexperts.com/gifs/selogo.gif"></a>
This is the <a href="http://siteexperts.com/forums/viewConverse.asp?d_id=14549">Find the Source Code Challenge II</a>.
The challenge, if you choose to accept, is to find the source code and
tell us how you found it. This challenge was issued March 12th by Chris
Rickard. Learn more in the <a href="http://siteexperts.com/forums/viewConverse.asp?d_id=14549">SiteExperts.com Forum</a>.
<p><em>Good Luck!</em>
</p><p>The hidden script is now in the form of an alert. If you did not get the alert, try refreshing the page.
<script>
var HashEncode = 0xB618F8203D7E417793E7AB15F2D91841;
var EncodeHash = 0;
for(var i=0;i<String(HashEncode).length;i++)
EncodeHash += HashEncode%7;
</script>
<script>
bod.attachEvent("oncontextmenu",function(e){alert("This is just here to annoy you. \\r\
\\r\
\\r\
I wonder how the 133t h4xor script kiddies protect their Scripts from Apple Users?");e.returnValue=false;});
try{if(document.namespaces[0].urn=="urn:p7662")document.write("<scrip" + "t id='wtf' src='hidden.asp?pass=B618F8203D7E417793E7AB15F2D91841'></scr" + "ipt>");}catch(ex){alert("Sorry, IE6 Only");}
</script>
</p></body></html>
That’s the source. Mozilla FireFox… select all… right click… view selection source.
Another method. In IE, with Accessibility Toolbar, select all, and click View Partial Source.
True, true, you got me there. Let me be more specific, the hidden code contains the alert() statement you receive on the page when viewed in an IE6 browser.
Oh well it doesn’t matter now. It’s been beaten and I’ve already given out my solution.
Thats pretty much an eyesore to look at… There are much more secure methods than this and in any case whats the point?
/*hppage status="protected"*/
eval(unescape("%66%75%6E%63%74%69%6F%6E%20%68%70%5F%64%31%30%28%73%29%7B%72%65%74%75%72%6E%20%73%7D"));eval(hp_d10(unescape("%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%27%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%6A%73%63%72%69%70%74%2E%65%6E%63%6F%64%65%3E%23%40%7E%5E%6E%69%67%41%41%41%3D%3D%57%21%78%5E%44%6B%4B%78%50%21%56%44%72%3A%6D%59%6E%6E%4D%57%4F%6E%31%59%2B%39%6A%...
unescape("%66%75%6E%63%74%69%6F%6E%20%68%70%5F%64%31%30%28%73%29%7B%72%65%74%75%72%6E%20%73%7D")
evaluates to…
function hp_d10(s){return s}
The next section again encodes to using JScript.Encode, in which this tool can decode… (http://www.virtualconspiracy.com/index.php?page=scrdec/download).
…
I’m sorry that’s not the answer I’m looking for. (See replies to Debs)
I’m sorry but encoded JScript is not the answer I’m looking for. Why did you give up? You have the tools. Give them a whirl!
I’m obviously baiting you
I dont get a popup anymore:D
Let me check it… Its good. Try refreshing.