View-fraud protection + real ad placement surfaces

Earning views now run on single-use server-issued tokens: the view only
counts when the full dwell elapses on the server clock; instant, forged,
replayed, and stale posts are all rejected, and the client countdown
pauses whenever the tab loses visibility or focus. New placements: login
ads on the sign-in screen (the per-day format's real home), a banner slot
in the back-office Overview, a text slot in the member sidebar, and a
member-ads banner on the homepage. Assets v=20260905g.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

This commit is contained in:

martbost

2026-09-05 06:15:27 -05:00

parent 7331eac244

commit 28ed925443

7 changed files with 79 additions and 27 deletions

									
										public/assets/home.js
									
		+1
		
												View File
												
				@@ -133,6 +133,7 @@

				    recalc();

				  }

				  IAP.adSlot('banner', 'adSlotHome');

				  loadLadder();

				  loadStats();

				  loadTicker();