the codes that doesnt' work are meaningles to mention.. yes there can be way of changing the address bar content after the fake page loads.. and please dont say that we have to watch the person typing the password when we find out which computer he uses... :-)