This client-based scheme would be totally vulnerable to spamming / general messing about. Doing it in the server requires an actual request, and should still al

This client-based scheme would be totally vulnerable to spamming / general messing about. Doing it in the server requires an actual request, and should still allow them to filter out attempts at gaming the system.