and it did work
thanks nookster
And thank you porncaster for the links. some good info there
ok, now, only thing it does not block is the .css & .js
when I type in the url to the .css I get a save prompt. what can I do so that people are not able to download my .css & .js files