Even in a Windoze system it is easy enough to browse the cache looking at graphics to dredge up any images presented to the user.

You can try tricky stuff with JavaScript to prevent the right mouse button submenu from allowing "image save". But then they only need to turn off JavaScript.

As mentioned previously, either dump the paranoia or get much more proactive. That could be using Java Applets to download the image and print using strange drivers etc. But if the image is enough why can't they just rescan the image?

Fundamentally you boss needs to rethink his or her approach to the project.

Now if you were to write a Perl script which would send the image to a print house along with a customer label. Then you could send printed images this way. In fact you could try a Perl driven Graphic-to-FAX-to-Mail routine. ;-)

Claude