I was thinking a really easy solution to this would be to put an option in the users profile to either confirm major commands (end attack, end fortification, auto-attack) or not.
Then all you need to do is add simple javascript onclick to those major buttons that would bring up a confirm box so ...