If the issue is how rapidly the client is clicking then one way would be to record and report clicks per second, for example. There are a few ways you could go about this depending on the situation. Disclaimer: Client input is always going to be something that the client can exploit.
