Of course, there's always the 'backdoor', but it's only available if you have access to the browser history log of someone who visited the desired 'secured section' (IE and other browsers log URLs in their history; if you can get the history log, you may find the 'secured URL' there, thus bypassing the security mechanism used here).
NB: I'm always interested to hear about any security flaws in the mechanism used here or your opinion about this material available here.
(c)Copyright 2001-2009, Gerrit E.G. Hobbelt (Ger Hobbelt a.k.a. [i_a] ) - Hebbut.Net