Multiple Votes Flood Control
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=19641
Printed Date: 12 April 2026 at 12:28am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Multiple Votes Flood Control
Posted By: wistex
Subject: Multiple Votes Flood Control
Date Posted: 01 May 2006 at 5:55am
|
I know this sounds like a weird request, but does version 8 have flood control for polls where people are allowed to vote multiple times? I'm having a problem where people setup scripts to vote 25 to 100 times a second so they can win the http://www.caribbeanchoice.com/battle.asp - battle . I'd like to limit them to be able to vote only once per second or something reasonable (i.e. the speed of a human).
We have a http://www.caribbeanchoice.com/battle.asp - Battle of the Islands on our website in which they are allowed to vote multiple times as many times as they want in order to see who has the most national pride. So multiple votes are welcome, just not multiple computer submitted votes.
Thanks.  ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 02 May 2006 at 1:01pm
|
There isn't a flood control at present when multiple votes are allowed.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: wistex
Date Posted: 03 May 2006 at 1:26am
|
Hmmm. I need to come up with a solution. The Battle of the Islands is one of the more popular features of the website, but people voting with scripts is becoming a problem. I think I am going to try limiting users to 1 vote per second by recording the user's timestamp in a poll_audit table in the database. When they come back to vote again, if its been more than a second, the current time stamp will be different than the timestamp in the database and it will allow the vote. If the time stamps match (i.e. its still within the current second), then it will redirect them to a "You are voting too fast" page telling them to slow down. I haven't decided yet, but I might somehow flag their account so I know who has tripped the flood control. For the average voter, it should take approximately 1 second for them to manually vote. Even on a T1, I haven't been able to vote faster than 1 vote per second, so I think that is reasonable. And I have already warned them that I was either going to eliminate the poll all together (making them earn votes every time they post in the forum instead) or implemement flood control. I already created a poll_audit table to record who is voting and the number of times they voted in polls allowing multiple votes. So it shouldn't be too hard to add the flood control. At first I hoped publicly displaying who is voting the most would discourage people from using scripts (the theory being it would be obvious who is cheating), but I have found that is not the case. So now I will have to implement flood control with advanced auditing to catch cheaters. Borg, do you have any suggestions, or do you think this would be sufficent to prevent people from voting more than once a second? Or would you suggest a different way of implementing flood control? ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
Posted By: WebWiz-Bruce
Date Posted: 03 May 2006 at 9:48am
|
I would set the flood control time higher as 1 second still allows 60 votes per second. I have put a flood control for the multiple votes on the 'to-do' list as long as I can find away without making modifications to the database. Disallowing Guests from voting should also help remote voting. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: wistex
Date Posted: 03 May 2006 at 11:31am
Thanks. 
Guest voting is disabled and simple auditing has already been implemented (i.e. I track how many times a user has voted in a poll, but not each individual vote due to storage concerns). I actually know who is doing it and unfortunately its been more than one person on more than one occasion. With version 7.x of WWF, it appears its pretty easy to vote extremely quickly and I am not sure how they are doing it. People have reported people voting hundreds of times a second... while logged in, and I have personally seen people vote 25 times a second... while logged in. So whatever they are doing apparently works even when they are logged in.
Maybe we are talking about implementing flood control in different ways, but the method I was thinking about would only allow 1 vote per second. If they voted at 1 second after midnight 00:00:01 it would prohibit any further votes until the clock reached 00:00:02. It would compare timestamps and if they matched, they couldn't vote. The only problem with my method is that it adds an additional database hits, since I would store the timestamp in the database. I suppose I could store the timestamp in their cookie instead of the database, but being stored on the user's system, it could be spoofed. I wonder if a session variable could be used for this? You probably have a much better way of doing it. ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
-boRg- wrote:Posted By: wistex
Date Posted: 11 May 2006 at 12:01am
|
I've caught them in the act. They have figured out some way to vote without using the poll alltogether!!! I shut off the poll at one point since they were overloading the server, and their votes kept rising and rising.
Hopefully upgrading to 8.x will solve this problem. I haven't figured out how they are voting without using the poll. ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
Posted By: wistex
Date Posted: 11 May 2006 at 8:11am
|
Okay, I figured out how they were doing it. They actually were using the poll and "technically" they weren't cheating. (Borg, I'll PM you on how they were doing it.)
The solution will be for me to audit the battle, tracking not only how many times a person votes, but also also how many times they exceeded 1 vote per second, and then automatically banning those who exceed a certain threshhold. I will probably only ban them from voting in the poll and not ban then from the entire website. ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
Posted By: WebWiz-Bruce
Date Posted: 11 May 2006 at 9:39am
|
The voting system for polls in version 8 is completely different so it maybe worth you upgrading to version 8 before making changes.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: wistex
Date Posted: 11 May 2006 at 10:32am
|
As soon as I move to the new web sever, which will be very soon. ------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |