didn't know about Cookie Clicker; that's a nice one too. Yeah, idea would be to have only real clicks ...
Sounds like a good proposal! Will think about that. How hard do you think would be for users to change the IP address and bypass this idea?
I don't expect advanced solutions against your site. It's not a bank, nobody would get a huge profit with fake clicks. You need to fight against script kiddies, not specialized hardware.
So I guess some easy heuristic to detect people that clicks too fast or do not sleep for a week will be enough.