Almost done with this, but I had one additional idea that will make it a lot more secure: You have to recognize three ascii images. That way bots will have a much harder time to bruteforce through this 😅.