Poll script multiple vote protection

[mouse]

I've pretty much got the rest of the poll going - all by myself ;) - but now I need to prevent cheeky blighters cheating.

Depositing a cookie is one easy way and starting a session should protect if the cookie's deleted but if the user ends the session and deletes the cookie it'll be vulnerable. Is there any other method could I use?

I'll be asking you guys to test the script for flaws later in the week...:eek:

[chrisvmarle]

You could have people login with a specific username wich is ferified by their e-mail (i.e. send the password to the e-mailaddress entered) and store all votings in a file including username. (Get the idea?)

Or maybe use all three of them; cookie + session + username

Mzzl, Chris

[mouse]

Yeah I thought of having a login but often people - me included - can't be bothered to register with site's.

[Roy Sinclair]

Don't let on that you're checking for multiple votes, use a combination of cookies and the IP address of the user to throw out multiple votes (silently). This of course works best when you don't have instant feedback so a cheater can't tell that their additional votes were thrown out.