QUOTE(cryomorph @ Apr 11 2012, 11:04)

Make the timer get started right after the image has been fully loaded.
QUOTE(ExTe @ Apr 11 2012, 11:40)

Agree on this !!
Dangerous (to Tenb's idea of anti-bot). I think the current timer syncs between the server and client. The server also holds the timestamp when a timer is started. So whatever you do, if your answer is not received after the required time since the started time on the server, that will be considered a fail. Pretty safe (and annoying to people with slow internet, but there's no perfection).
Now if it starts on client, several things will happen. The cheater/botter can write a script that stops the image from fully loaded, thus buying them time. Or another approach, is to stop the timer itself (it is now a javascript runnind at the client, so that's easy). Anything just client-sided is
dangerous exploitable.
This post has been edited by LangTuTaiHoa: Apr 11 2012, 08:54