Oh god! Isn't it a way too public?

I'd restrict it for logged users only.
The bug with no method 'abs' seems gone.
i do also think this is too public. for example i can send an amount to an btc address and write some totally different in the note maybe to influence someone. as receiver do i have the option to delete the info?