Web Wiz Support and Community Forums : Multiple Votes Flood Control

Web Wiz Support and Community Forums : Multiple Votes Flood Control https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sat, 11 Apr 2026 22:51:35 +0000 Thu, 11 May 2006 10:32:28 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=19641 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Multiple Votes Flood Control : As soon as I move to the new web...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106746.html#106746 Author: wistex
Subject: 19641
Posted: 11 May 2006 at 10:32am

As soon as I move to the new web sever, which will be very soon.

]]> Thu, 11 May 2006 10:32:28 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106746.html#106746 <![CDATA[Multiple Votes Flood Control : The voting system for polls in...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106731.html#106731 Author: WebWiz-Bruce
Subject: 19641
Posted: 11 May 2006 at 9:39am

The voting system for polls in version 8 is completely different so it maybe worth you upgrading to version 8 before making changes.]]> Thu, 11 May 2006 09:39:38 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106731.html#106731 <![CDATA[Multiple Votes Flood Control : Okay, I figured out how they were...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106721.html#106721 Author: wistex
Subject: 19641
Posted: 11 May 2006 at 8:11am

Okay, I figured out how they were doing it. They actually were using the poll and "technically" they weren't cheating. (Borg, I'll PM you on how they were doing it.)

The solution will be for me to audit the battle, tracking not only how many times a person votes, but also also how many times they exceeded 1 vote per second, and then automatically banning those who exceed a certain threshhold. I will probably only ban them from voting in the poll and not ban then from the entire website.

]]> Thu, 11 May 2006 08:11:11 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106721.html#106721 <![CDATA[Multiple Votes Flood Control : I've caught them in the act....]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106703.html#106703 Author: wistex
Subject: 19641
Posted: 11 May 2006 at 12:01am

I've caught them in the act. They have figured out some way to vote without using the poll alltogether!!! I shut off the poll at one point since they were overloading the server, and their votes kept rising and rising.

Hopefully upgrading to 8.x will solve this problem. I haven't figured out how they are voting without using the poll.

]]> Thu, 11 May 2006 00:01:34 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106703.html#106703 <![CDATA[Multiple Votes Flood Control : -boRg- wrote:I have put...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106105.html#106105 Author: wistex
Subject: 19641
Posted: 03 May 2006 at 11:31am

-boRg- wrote:

I have put a flood control for the multiple votes on the 'to-do' list as long as I can find away without making modifications to the database.

Thanks.

-boRg- wrote:

Disallowing Guests from voting should also help remote voting.

Guest voting is disabled and simple auditing has already been implemented (i.e. I track how many times a user has voted in a poll, but not each individual vote due to storage concerns).

I actually know who is doing itand unfortunately its been more than one person on more than oneoccasion. With version 7.x of WWF, it appears its pretty easy to vote extremely quickly and I am not sure how they are doing it. People have reported people voting hundreds of times a second... while logged in, and I have personally seen people vote 25 times a second... while logged in.

So whatever they are doing apparently works even when they are logged in.

-boRg- wrote:

I would set the flood control time higher as 1 second still allows 60 votes per second.

Maybe we are talking about implementing flood control in different ways, but the method I was thinking about would only allow 1 vote per second. If they voted at 1 second after midnight 00:00:01 it would prohibit any further votes until the clock reached 00:00:02. It would compare timestamps and if they matched, they couldn't vote.

The only problem with my method is that it adds an additional database hits, since I would store the timestamp in the database. I suppose I could store the timestamp in their cookie instead of the database, but being stored on the user's system, it could be spoofed. I wonder if a session variable could be used for this?

You probably have a much better way of doing it.

Edited by wistex - 03 May 2006 at 12:08pm]]> Wed, 03 May 2006 11:31:25 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106105.html#106105 <![CDATA[Multiple Votes Flood Control : I would set the flood control...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106084.html#106084 Author: WebWiz-Bruce
Subject: 19641
Posted: 03 May 2006 at 9:48am

I would set the flood control time higher as 1 second still allows 60 votes per second.

I have put a flood control for the multiple votes on the 'to-do' list as long as I can find away without making modifications to the database.

Disallowing Guests from voting should also help remote voting.
]]> Wed, 03 May 2006 09:48:49 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106084.html#106084 <![CDATA[Multiple Votes Flood Control : Hmmm. I need to come up with a...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106064.html#106064 Author: wistex
Subject: 19641
Posted: 03 May 2006 at 1:26am

Hmmm. I need to come up with a solution. The Battle of the Islands is one of the more popular features of the website, but people voting with scripts is becoming a problem.

I think I am going to try limiting users to 1 vote per second by recording the user's timestamp in a poll_audit table in the database. When they come back to vote again, if its been more than a second, the current time stamp will be different than the timestamp in the database and it will allow the vote. If the time stamps match (i.e. its still within the current second), then it will redirect them to a "You are voting too fast" page telling them to slow down.

I haven't decided yet, but I might somehow flag their account so I know who has tripped the flood control.

For the average voter, it should take approximately 1 second for themto manually vote. Even on a T1, I haven't been able to vote fasterthan 1 vote per second, so I think that is reasonable. And I have already warned them that I was either going to eliminate the poll all together (making them earn votes every time they post in the forum instead) or implemement flood control.

I already created a poll_audit table to record who is voting and the number of times they voted in polls allowing multiple votes. So it shouldn't be too hard to add the flood control.

At first I hoped publicly displaying who is voting the most would discourage people from using scripts (the theory being it would be obvious who is cheating), but I have found that is not the case. So now I will have to implement flood control with advanced auditing to catch cheaters.

Borg, do you have any suggestions, or do you think this would be sufficent to prevent people from voting more than once a second? Or would you suggest a different way of implementing flood control?
]]> Wed, 03 May 2006 01:26:13 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post106064.html#106064 <![CDATA[Multiple Votes Flood Control : There isn't a flood control...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post105974.html#105974 Author: WebWiz-Bruce
Subject: 19641
Posted: 02 May 2006 at 1:01pm

There isn't a flood control at present when multiple votes are allowed.]]> Tue, 02 May 2006 13:01:33 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post105974.html#105974 <![CDATA[Multiple Votes Flood Control : I know this sounds like a weird...]]> https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post105884.html#105884 Author: wistex
Subject: 19641
Posted: 01 May 2006 at 5:55am

I know this sounds like a weird request, but does version 8 have flood control for polls where people are allowed to vote multiple times? I'm having a problem where people setup scripts to vote 25 to 100 times a second so they can win the battle. I'd like to limit them to be able to vote only once per second or something reasonable (i.e. the speed of a human).

We have a Battle of the Islands on our website in which they are allowed to vote multiple times as many times as they want in order to see who has the most national pride. So multiple votes are welcome, just not multiple computer submitted votes.

Thanks.

]]> Mon, 01 May 2006 05:55:13 +0000 https://forums.webwiz.net/multiple-votes-flood-control_topic19641_post105884.html#105884