Regarding reCAPTCHA on Trading page

[Soxirella]

Hi Alex, based on the fact that I sometimes see the main trade page open and immediately reload to a page asking for CAPTCHA verification, I am going to assume that the randomizer code is on the client side. If this is the case, my first suggestion would be to move it to the server side, so that users don't have to view/load two pages in the time of a blink. i.e. the user does not see the main trading page first and directly goes to the captcha page.

 

Second, instead of interrupting the transaction, I'd then either make the CAPTCHA load and verify using AJAX, to keep the user on the same page, or submit the verification along with the trade info. In case the verification needs to be done after a buy or sell trade is made, I'd complete the transaction, but reverse it for free, if captcha fails until the end of turn.

 

In other words:

1) Player A hits Buy to purchase 100 food at $100 from B

2) Record a purchase transaction for A - 100 food @ $100 from B

3) Ask for Captcha, including the #2 transaction's id from the DB

4) At the end of every turn, check whether there are any transactions without Captcha verification

5) To reverse, post a Sell transaction as A sells B 100 food @ $0

 

I realise there have been many comments and suggestions on captcha in the past, but I hope my three points and pseudo code suggestions were value added.

Edited January 29, 2017 by Soxirella