[Ted S]

Originally Posted by faisaly.com

Hello all .
There is a nasty bug with this hack .
If someone tries to copy the link of a yes/no button which is used for rating while he is logged in , and then logs out and enters it in a browser, the rate gets accepted!!
(suppose the link to the yest button is like this : http://forum.ustmb.ir/helpfulanswers...id=5662&rank=1 , if you copy this to your address bar and press enter, the rate will be accepted! while you are not logged in at all!)
This causes mischievous users to abuse the system for giving positive or negative rates as they wish!
would someone please think about it ?

Interesting.... There's 5 of 6 different options that would stop this from happening like if you had a post minimum, votes per day, etc. but in the absence of those it looks like you are correct. And it's gone unnoticed for years too

Simple fix with the attached xml and voting script.

I'll test around more this evening and clean it up for a release.