How to ban a user from a mobile phone on the site?

Alexander Pashchenko2011-12-06 20:00:46

Mobile development

Alexander Pashchenko, 2011-12-06 20:00:46

There is an online game, through the web.
It is necessary to somehow reliably ban dishonest / violating the rules of users.
Tried to ban by login / e-mail - does not help. They register a new account, and again into battle.
It doesn’t work by IP - users log in from mobile devices. Ripped off the session - connected, and now you have a new address. Blocking ranges is not an option - it is a rejection of a certain part of the audience.
It also doesn’t work for the user-agent ... it seems to be about the same for everyone ... At least it’s not unique.
Maybe there are some standard solutions?

Answer the question

In order to leave comments, you need to log in

11 answer(s)

dotneter, 2011-12-07
@point212

www.samy.pl/evercookies/

Alexey Sidorov, 2011-12-06
@Gortauer87

Make an account verification by phone?

hotach, 2011-12-06
@hotach

Maybe you should try to get by with in-game resources? The more the user plays, the more expensive the account becomes for him (at least because of the time spent) and the less he violates the rules for fear of a ban. Make some beginner pen with a hard banhammer and maybe that will solve the problem.

YourChief, 2011-12-06
@YourChief

add an inconspicuous flash file to the web page, which will be marked during the ban in the internal storage of the flash - most do not clear it. but here you have to get a little confused with the action script

Andrey, 2011-12-06
@AndreyMorozov

Well, cookies will help weed out a small percentage of cheaters. Can be combined with IP. Those. just changing the ip or clearing the cookies will not work. It will need to be done at the same time. And you can’t think of anything else, like.

bad_guy, 2011-12-06
@bad_guy

Ban not by the user parameter, but by the parameter of his actions. You come up with a small list of illegal actions. "Describe" == code.

niko83, 2011-12-06
@niko83

Can try an integrated approach. To the maximum, take into account all the information from the headers + IP range, set a cookie as a flag for it and force new accounts to log in. So the user will create a couple of accounts - there will be statistics. On the third it can be calculated.
But the chances of being wrong are still there.

Eugene, 2011-12-07
@Nc_Soft

Set a cookie in the browser, form a hash from USER_AGENT+HTTP_ACCEPT + some other HTTP_ headers.

Denis Turenko, 2011-12-07
@Dennion

There are many ready-made libraries yandex.ru/yandsearch?text=detect+mobile&from=fx3&clid=46510&lr=213
Set redirection to a stub from mobile phones.

azizoid, 2011-12-07
@azizoid

Track duplicate contacts (they still registered with you), start warning and banning, while not deleting, but simply deactivating. Well, a person registers a dozen or two emails ... and then they get bored.

masterclass, 2011-12-08
@masterclass

As an option - authorization through social networks. Through the same VK - now they have registered there via SMS and by invitation (as far as I heard), so registering a new account in your game = registering a new account in social networks.