If you want anything secure, javascript is simply not up to the challenge. You can still 'make' something of it though - why not a server-side script or similar?