[suggestion] Ranks management and protection from fakers

[Fifi]

I think it would be nice, if we could be able to switch the mode of our record list to manual confirmation of times on the webpage after finishing. It would stop fakers, without the need of using in-game accounts and loosing the vanilla client players. I think we should make it optional - so the people, who don't want to confirm or reject their records, will still get them saved (as usual). There should also be an option to start and stop maintaining them manually at any time. This shouldn't break the freedom Teeworlds offers, but may secure our ranks more. We shall never delete the rejected ranks, though - instead, we can just hide them from one's main public profile page, so if somebody reject something by accident, he would easily recover it.

I think it won't be a big problem to give the forum users access to their player profiles, while the rest may be required to send some replays or show up in game to authenticate themselves. To make things more comfortable, DDNet Client could allow players to log in with the webpage account (or some security token copied from it) and confirm times without manually opening the website.

So, to sum it up, the whole idea is something like:
- Setting up a simple account system for the ranks webpage.
- Allowing players to leave it unmaintained or to switch it to a 'maintained mode'.
- The 'maintained mode' won't be showing times, until the player log in and confirm them manually.
- DDNet Client users may be also able to copy a security token from their account and put it into their client, so their times will be automatically confirmed.
- The rejected times will be just hidden from the main profile pages, which means that players will be able to recover them, if they deleted some by an accident.
- We may also give players the ability to choose whether new times should be accepted or rejected by default.
- The list of all times, including the rejected ones, should be separated to another page of the player public profile.
- Only the confirmed finishes and finishes of players, who don't use this feature, should be taken into account when calculating ranks.
- We should make old (maybe more than two weeks old?) and top10 ranks locked, to prevent players from hiding them for fun.

To help players recognise fake times, we could enumerate IP addresses used to get them and show them only that numbers (to avoid revealing somebody's personal data to them) - they will be able to recognise them, like '2' in '1 1 1 1 1 1 1 2 1 1 1 1'. I'm still a bit unsure how to cope with the nicknames used by many tees, but maybe we could disable this feature for them or just rely on the "all times" profile pages?

[kamillentee]

Nein!

Compare this whole work it will need to just having fun and don't take teeworlds too serious. Even if there is sometimes a faker its still not worth to implement such a giant (account) system. And you know what I usually say if you have another account idea. Don't destroy the KISS principle teeworlds is following.

[Fifi]

Hmm, I guess you might be right. KISS is a good principle and it worked well so far.
Maybe we could allow people to download player stats then? They would be able to keep track of their own times offline, even if somebody fake them.