View Full Version : Stopping programs logging in

08-05-2008, 01:48 PM
Hey guys,

We recently have a cheating communtiy trying to make programs for my site :X They are creating a login script which allows them to login into the site via there program. If we block the login script, we can pretty much stop all their programs from working.

We are trying to add different tricks to stop them from logging in, but so far they have gotten past two of our scripts :X

So i was wondering if you guys have any advice? Like maybe check some of the $_SERVER variables? I'm not too sure as i hardly use them so some help would be greatly appriciated :D

08-05-2008, 02:46 PM
Have you tried a CAPTCHA (http://www.google.com/search?q=php+captcha) image?

08-05-2008, 02:51 PM
Yea :X We are looking for some other methods too tho :X

08-05-2008, 02:57 PM
Well there are numerous ways:
- use email validation. Send an email that contains a link they must click to complete registration
- log IP addresses. If you notice a trend of IPs belonging to certain unwanted registrants, block their IP, or even their entire block of IPs
- hide an input with CSS. If it is filled in then it's a good bet a bot submitted the form
- write a required input with JavaScript

It'd also be helpful to have you list your current methods so we're not sitting here wasting everyone's time giving you ideas you've already used.

08-05-2008, 02:59 PM
-write a required into with Javascript

- i like that one. So that would mean they'd have to have javascript enabled :X? Is their a quick example you could show me?

08-05-2008, 03:02 PM
Just use document.write( '<input type="text" name="whatever" value="" />' ), or if you're into proper DOM, use var input = document.createElement( 'input' );, etc