I agree, you would definitely do something server side to display the message only if the requestor IP is the one you are looking for.