 <p>If you're happy to take javascript's word for it that the level has been completed then just set a cookie from javascript.</p> <blockquote> <p>an operation that can't be simulated by the user</p> </blockquote> <p>Sorry - but if it's javascript which dtermines when they've completed the level then there's nothing to stop the user falsifying the results.</p>