Preventing the bad guy from "validating" his own script a million times is difficult. At the end of the day, I think security basically has to come from "I trus

Preventing the bad guy from "validating" his own script a million times is difficult. At the end of the day, I think security basically has to come from "I trust the website that I'm on."