How to restrict access to the form on the site?

Question

JavaScript

The site has an authorization form for a personal account (LK).
The problem is that some left app has appeared in google play to work with lux. Accordingly, authorization takes place in it, etc., even our captcha. As I understand it, the easiest way, for such an application, everything is taken through curl, and then it is further parsed.
Actually, how to implement a protection mechanism so that when submitting, the form is not valid.
Surely there are some solutions, from the same tweeters, in contact.

Answer 1

Tweeters and VKontakte do not have such solutions, they are not enemies to themselves)) There is no 100% method here and cannot be, you can use dynamic field names for example. And it’s even better to include in the contract under which the user signs during registration about the prohibition of using third-party software for authentication (authorization comes after), well, cut the software from the market for this case.

Answer 2

yeah, you still have a browser "cut from your computer" developed by yourself)))
first of all, ask yourself: why am I confused to do this and what is my goal?
what will I get in return, what will I gain and what will I lose if they use other shells to enter the personal account?
99.9% of the time it's pointless and stupid...

Answer 3

Since the javascript tag, then generate a token when the form is displayed, and check it when submitting it

Answer 4

Check HTTP_REFERER.