How to ban a user from a mobile phone on the site?

Question

Mobile development

There is an online game, through the web.
It is necessary to somehow reliably ban dishonest / violating the rules of users.
Tried to ban by login / e-mail - does not help. They register a new account, and again into battle.
It doesn’t work by IP - users log in from mobile devices. Ripped off the session - connected, and now you have a new address. Blocking ranges is not an option - it is a rejection of a certain part of the audience.
It also doesn’t work for the user-agent ... it seems to be about the same for everyone ... At least it’s not unique.
Maybe there are some standard solutions?

Answer 1

www.samy.pl/evercookies/

Answer 2

Make an account verification by phone?

Answer 3

Maybe you should try to get by with in-game resources? The more the user plays, the more expensive the account becomes for him (at least because of the time spent) and the less he violates the rules for fear of a ban. Make some beginner pen with a hard banhammer and maybe that will solve the problem.

Answer 4

add an inconspicuous flash file to the web page, which will be marked during the ban in the internal storage of the flash - most do not clear it. but here you have to get a little confused with the action script

Answer 5

Well, cookies will help weed out a small percentage of cheaters. Can be combined with IP. Those. just changing the ip or clearing the cookies will not work. It will need to be done at the same time. And you can’t think of anything else, like.

Answer 6

Ban not by the user parameter, but by the parameter of his actions. You come up with a small list of illegal actions. "Describe" == code.

Answer 7

Can try an integrated approach. To the maximum, take into account all the information from the headers + IP range, set a cookie as a flag for it and force new accounts to log in. So the user will create a couple of accounts - there will be statistics. On the third it can be calculated.
But the chances of being wrong are still there.

Answer 8

Set a cookie in the browser, form a hash from USER_AGENT+HTTP_ACCEPT + some other HTTP_ headers.

Answer 9

There are many ready-made libraries yandex.ru/yandsearch?text=detect+mobile&from=fx3&clid=46510&lr=213
Set redirection to a stub from mobile phones.

Answer 10

Track duplicate contacts (they still registered with you), start warning and banning, while not deleting, but simply deactivating. Well, a person registers a dozen or two emails ... and then they get bored.

Answer 11

As an option - authorization through social networks. Through the same VK - now they have registered there via SMS and by invitation (as far as I heard), so registering a new account in your game = registering a new account in social networks.