The string being passed to the upload page - can be encrypted if you tell me how to decrypt it.
In the final version, the textarea can be replaced with a hidden input, and the button.click event can be replaced with document.ready