Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set up basic authentication based on IP address to prevent people from voting multiple times #54

Open
JulesLecuir opened this issue Apr 12, 2022 · 0 comments

Comments

@JulesLecuir
Copy link

JulesLecuir commented Apr 12, 2022

Today the app is really beautiful and well designed, but it's such a shame that we can't use it in real case scenarios because no basic security and authentication processes are implemented.

A really quick win could be to save the IP address of voters in the Vote object (and hash if needed to be more respectflul of privacy), so that you can only submit one vote per IP address (make a check on vote submission). I guess this can be really quick to implement and quite effective in limiting cheating.

A second quick win could be to put a basic cookie "hasVoted-<id_of_the_vote>" in local storage to prevent vote if a cookie is present (some stuff needs to be implemented in frontend too, then).

With those two things, we can discourage 90% of voters that could be tempted to vote muliple times.

Thank you !

@JulesLecuir JulesLecuir changed the title Set up basic authentication based on IP adress to prevent people from voting multiple times Set up basic authentication based on IP address to prevent people from voting multiple times Apr 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant