OGAME WIKIPEDIA

arrow_back Back to List

Bot Protection System v2.0

🛡️ What Is the Bot Protection System?

In OGame-style space strategy games, bot usage is a serious problem. Bots can perform actions such as automated resource farming, fleet dispatching, attack coordination, and economic manipulation without human interaction. This creates unfair advantages over real players who invest hours of effort.

The OGame Life Bot Protection System v2.0 is a comprehensive security infrastructure built to solve this issue. Working entirely server-side, unlike many security measures, it provides protection that cannot be bypassed.

💡 Why Is It Important? Most OGame clones either lack bot protection entirely or rely on easily bypassable JavaScript-based solutions. Thanks to its advanced protection architecture, OGame Life eliminates all such vulnerabilities with a strong verification structure.

🎮 Bot Problems in Other Games

In OGame-style games, bot usage is unfortunately very common. Many players use bot tools to gain competitive advantage. This leads to:

  • Economic Imbalance: Bots gather resources 24/7 and gain unfair advantage over normal players
  • Instant Reaction: They can send defensive fleets within milliseconds during an attack
  • Coordinated Attacks: Able to perform hundreds of automated attack waves
  • Resource Transfer: Able to transfer resources between accounts undetected
  • Market Manipulation: Capable of manipulating trade systems
⚠️ Reality: According to general observations, in OGame-like games without protection systems, 30–50% of active players use bots or automation tools in some way. This severely harms the gameplay experience.

🔐 Protection Layers

The OGame Life Bot Protection System operates with 7 different security layers. Each layer supports the others, eliminating the possibility of bots finding a "single weak point".

1️⃣ Server-Side Security Code

Security codes are generated and verified entirely server-side. Therefore, bot programs cannot guess, manipulate, or bypass the code.

  • Random Code: 2-digit random number between 10–99
  • Single Use: A new code is generated for each action
  • 5-Minute Validity: Automatically renewed when expired
  • Non-Copyable: CSS prevents text selection & copying

2️⃣ Rate Limiting

The most obvious bot behaviour is executing actions at abnormal speed. The rate limiting system immediately detects this behaviour.

Parameter Value Description
Time Window 60 seconds Requests are counted within this window
Max Requests 10 requests Maximum allowed within 60 seconds
Fast Request Threshold 1 second Intervals shorter than this are suspicious
Page Refresh Limit 8 times/minute Special limit for fleet page

3️⃣ Timestamp Verification (Replay Attack Protection)

Bots sometimes capture a valid form submission and attempt to resend it later. Timestamp verification prevents this type of attack.

  • Every form contains a timestamp of when it was generated
  • The server compares the incoming timestamp with the system value
  • Mismatched timestamps result in +2 violation points
  • Manipulated forms are instantly rejected

4️⃣ Minimum Time Validation

A human naturally takes at least X seconds after opening a page to fill in and submit a form. Bots try to perform actions within milliseconds.

✅ How It Works: When the page loads, the server stores a timestamp. When the form is submitted, the elapsed time is checked. Forms submitted faster than X seconds are rejected and violation points applied.

5️⃣ Attempt Limit System

Each security code has a maximum of 5 attempts. This prevents brute-force attacks.

  • 1–4 Wrong Entries: Warning message, remaining attempts shown
  • 5th Wrong Entry: Security code resets, cooldown starts
  • Continuous Errors: Violation points accumulate, cooldown increases

6️⃣ Increasing Cooldown System

When suspicious activity is detected, a progressively increasing timeout is applied. This system completely blocks persistent bots.

Violations Cooldown Duration Cumulative Duration
1st Violation 1 minute 1 minute
2nd Violation 2 minutes 3 minutes
3rd Violation 4 minutes 7 minutes
4+ Violations 5 minutes (max) Permanent blocking

7️⃣ Smart Violation Management

To ensure that real players can recover from accidental violation points, a fair balancing system is applied.

⚖️ Balancing Formula:
  • Each mistaken operation: +1 violation point
  • Every 5 successful operations: -1 violation point
Thanks to this system, real players gradually clear their violation points, while bots—due to continuous errors—get blocked.

🎯 Protected Pages

The Bot Protection System covers all critical action pages in the game:

Page Action Protection
Fleet Dispatch Attack, transport, expedition etc. ✅ Full Protection
Resource Collection Collecting resources from other planets ✅ Full Protection
Fleet Recall Recalling fleets from other planets ✅ Full Protection
Resource Transfer Transferring resources to other planets ✅ Full Protection

🚫 What Bots Can No Longer Do

Thanks to this protection system, bots can no longer perform the following actions:

  • Send automated fleet attacks
  • Refresh the page to bypass the security code
  • Bypass forms using direct POST requests
  • Modify timestamps to circumvent time validation
  • Perform actions in under 3 seconds
  • Crack the code through unlimited attempts
  • Exceed the rate limit and spam actions
  • Launch replay attacks using stored form data

👤 For Normal Players

The bot protection system is designed to not affect real players. All you need to do is enter the 2-digit security code shown on the screen.

📝 How to Use:

  1. Step 1: Open the action page (fleet dispatch, resource transfer etc.)
  2. Step 2: Check the yellow 2-digit security code displayed on screen
  3. Step 3: Enter the code into the required field
  4. Step 4: Complete your action
✅ Tip: The security code is valid for 5 minutes. You can see the remaining time. Make sure to complete your action before it expires.
⚠️ Warning: You have 5 attempts for entering the code. After 5 wrong attempts, a short cooldown is applied. Don’t panic—after the cooldown, you can try again.

📊 Technical Specifications

Feature Value
Security Code Format 2-digit number (10–99)
Code Validity Duration 5 minutes (300 seconds)
Maximum Attempts 5 attempts
Minimum Action Time 3 seconds
Rate Limit Window 60 seconds / 10 requests
Maximum Cooldown 5 minutes
Violation Clearing 1 successful action = -1 violation
Code Generation Location Server (PHP/Session)

🏆 Why OGame Life?

OGame Life offers the most comprehensive bot protection system in the industry. Comparison with other games:

Feature Other Games OGame Life
Security Code ❌ None / JS-based ✅ Server-side
Rate Limiting ❌ None / Insufficient ✅ Multi-layered
Timestamp Verification ❌ None ✅ Active
Increasing Cooldown ❌ None ✅ Exponential growth
Violation Clearing ❌ None ✅ Fair system
Bypass Risk 🔴 High 🟢 Minimal

🎯 Conclusion

OGame Life Bot Protection System v2.0 protects your game from bots and cheating tools with 7 different security layers. Server-side security codes, intelligent rate limiting, timestamp verification, minimum time validation, attempt limits, increasing cooldown, and smart violation management work together to eliminate any “single weak point” that bots could exploit.

Thanks to this system, everyone competes under equal conditions in OGame Life. Your effort and strategy cannot be unfairly overshadowed by opponents using bots. Designed for a fair gameplay environment, this system protects real players while effectively blocking bots.

🌟 The OGame Life Difference: While other games struggle with bot users, in OGame Life you compete purely with your strategy and skills. Fair play, real fun!