Topic: want users to be able to vote once a day...some are cheating by erasing cookie.. (Read 5867 times)

bloginterviewer · « **on:** 28 July 2007, 00:24 »

So on http://www.bloginterviewer.com users are allowed to vote once a day due to a cookie that is stored on their computer. Unfortunately some have figured out that you can simply erase the cookie and vote multiple times. Is there any way to prevent this?

GaMerZ · « **Reply #1 on:** 28 July 2007, 06:50 »

Do a IP check with date

Openup postratings.php:
Find:

Code: [Select]

$get_rated = $wpdb->get_var("SELECT rating_ip FROM $wpdb->ratings WHERE rating_postid = $post_id AND rating_ip = '".get_ipaddress()."'");

Replace:

Code: [Select]

$get_rated = $wpdb->get_var("SELECT rating_ip FROM $wpdb->ratings WHERE rating_postid = $post_id AND rating_ip = '".get_ipaddress()."' AND rating_timestamp  > ".current_time('timestamp')-(24*60*60));

bloginterviewer · « **Reply #2 on:** 28 July 2007, 13:33 »

Thanks, I just put the code in. Let's see how it works.

Mike

bloginterviewer · « **Reply #3 on:** 28 July 2007, 13:59 »

Put the code in.

I voted, deleted the cookies, and it let me vote again...any suggestions?

Ttech · « **Reply #4 on:** 28 July 2007, 14:03 »

Do you have the ip check option checked?

GaMerZ · « **Reply #5 on:** 28 July 2007, 15:49 »

did u choose logged by IP and Cookie

Ttech · « **Reply #6 on:** 28 July 2007, 16:00 »

Echo.

bloginterviewer · « **Reply #7 on:** 28 July 2007, 16:15 »

I did choose both, then I went to change it to just ip. I think that will work, right?

But now I'm just trying to get it to function again: http://forums.lesterchan.net/index.php/topic,809.60.html

bloginterviewer · « **Reply #8 on:** 28 July 2007, 17:08 »

Okay, I got it to work right the normal way, but I changed the code like our recommended above and got this error:

WordPress database error: [You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-86400' at line 1]
-86400

bloginterviewer · « **Reply #9 on:** 28 July 2007, 17:17 »

Once this is fixed I'll stop pestering you...for today

GaMerZ · « **Reply #10 on:** 28 July 2007, 17:27 »

Try this replacement:

Code: [Select]

$get_rated = $wpdb->get_var("SELECT rating_ip FROM $wpdb->ratings WHERE rating_postid = $post_id AND rating_ip = '".get_ipaddress()."' AND rating_timestamp  > '".(current_time('timestamp')-(24*60*60))."'");

bloginterviewer · « **Reply #11 on:** 28 July 2007, 17:34 »

Thanks, no more error message. Now it's time to see if it lets me vote again in 24 hours.

Mike

bloginterviewer · « **Reply #12 on:** 28 July 2007, 17:49 »

Hey,

Should I have it by IP and Cookie for this? Is that more secure or will it mess things up?

GaMerZ · « **Reply #13 on:** 28 July 2007, 17:59 »

yes IP/Cookie

bloginterviewer · « **Reply #14 on:** 28 July 2007, 18:05 »

Thanks,

I do believe you also have to replace this, too:

In postratings.php
Find:
Code:

$rate_cookie = setcookie("rated_".$post_id, 1, time() + 30000000, COOKIEPATH);

Replace:
Code:

$rate_cookie = setcookie("rated_".$post_id, 1, time() + 86400, COOKIEPATH);

I just wanted to make sure others know...I'm correct, right?

GaMerZ · « **Reply #15 on:** 28 July 2007, 18:17 »

yeap =)

Ttech · « **Reply #16 on:** 29 July 2007, 13:33 »

skyman · « **Reply #17 on:** 14 February 2009, 21:26 »

I've have recently upgraded to 2.7.1 however I've been having this same issue as well even before the upgrade. I tried the methods in this post and still can revote after erasing cookies. Does anybody have a fix for this, it's irritating that users can vote multiple times on the same post via this problem. Thanks.

GaMerZ · « **Reply #18 on:** 15 February 2009, 13:28 »

You can logged by IP and Cookie. There is not such thing as fail proof way. Even going through proxy or deleting cookie or ADSL (where IP keep changing) there is no 100% to prevent it.

skyman · « **Reply #19 on:** 15 February 2009, 16:11 »

I'm sure there is, I've seen rating systems used on WP before that do not allow to re-vote after wiping out cookies. Only problem is, I have this integrated through my WordPress and static site and I would hope there's a fix for it rather than having to find another rating system to go with.

News:

Author Topic: want users to be able to vote once a day...some are cheating by erasing cookie.. (Read 5867 times)