Ok I am too tired and I really hope it makes sense. I will try to briefly explain how this should work and why it would make things easier.
No logins and no drama
Public information that the scripts would use:
TxID of latest dividends, List of output addresses and amounts, BTC per share on the last div
Viewing the orderbook:
well.... you VIEW the orderbook!
Making an ASK:
Straight forward. Form asking for: Number of shares, Price per share, AddressOfShares, Signed randomly generated message. If message
signature verifies and available number of shares are checked (Automatically deduced from public info) , ASK if posted (to be verified), Otherwise ignored
Verification of valid asks by friedcat:
Since the orderbook is public, A script can fetch the current asks, verifies them and send the site a signed message with the (verified) ASKS (The address signing this can be another address that friedcat declares official for himself other than wallet address for security purposes)
Cancelling an ASK:
Again straight forward. User picks an ASK, selects "Cancel ASK request", signs a randomly generated string with the ASK address. Verified are deleted, non-verified signatures are ignored
Making a bid:
On each profile here there is a "Bitcoin address" associated with the account. So a bidder would fill: forumuserID, Number of shares, buying at price. And signs a randomly generated text using his profile associated BTC address. Scripts fetch the address and verifies the message, post the Bid, otherwise ignores
Cancelling a Bid:
Tired of repetitions, Basically same as cancelling an ASK
Again I am so very not on my best shape and cognitive abilities right now. Will make sure this makes any sense when I wake up. (if ever the coffee effect would go away and I would get to have some sleep :S)