didn't know about Cookie Clicker; that's a nice one too. Yeah, idea would be to have only real clicks ...

well unless you'll make people record themselves clicking it's impossible to do - even if you are completely able to detect the software, people can still exploit the system by building additional hardware. if you want only real clicks, you could just limit the clicks to 1/ip address and then have only country ranking visible

> if you want only real clicks, you could just limit the clicks to 1/ip address and then have only country ranking visible

Sounds like a good proposal! Will think about that. How hard do you think would be for users to change the IP address and bypass this idea?

In spite of perfect detections of fake clicks is impossible, at lest trying to detect and filter them is a nice problem.

I don't expect advanced solutions against your site. It's not a bank, nobody would get a huge profit with fake clicks. You need to fight against script kiddies, not specialized hardware.

So I guess some easy heuristic to detect people that clicks too fast or do not sleep for a week will be enough.

Indeed. Thanks for advice. I will implement it. I will first work on a throtting system will and a way to detect programmed clicks. This should already drastically reduce spam.

Those two Spanish accounts look very suspicious...

Indeed.