There is a problem in the voting system that compromises all not-so-huge pligg-based communities.
When an identified user votes, checks are made not to allow him to vote twice. This works as well when an anonymous user votes, on the IP basis.
But when an identified user votes, then disconnects (or open the app in an other browser), he can vote twice as anonymous.
This is a problem for all localized or specialized communities that have ten or so votes per link.
- tested version: 9.9.5
- way to reproduce:
1. login
2. vote
3. logout
4. vote
http://forums.pligg.com/bug-report/14871-double-vote-made-easy.html
Advertisement
