[John]

Originally Posted by futureal

I know, I know.

I tried a similiar method with a 3-, 5- and 10-second check awhile back (going back and forth from Flash and PHP) and it worked on my test server but I was getting incorrect timeouts on a heavily-used server when the scores table was large (thousands of scores, so the check query took longer). If you are using a separate sessions table (it sounds like you are) then that was probably the difference. By regularly pruning the sessions it would keep that query fast, even with a huge amount of scores.

Indeed. It's the only *reasonable* cheat protection that can be offered, without the use of SSL.