Yes. And now that I have secured every way for users to phish on my site, I am now getting attacked by people who set-up the fake page on my site, and then have the actual script on other peoples sites. This is very frustrating, and it is almost impossible to prevent since they use all html pages.