[Zachery]

Originally Posted by Weasel

One of my users found an exploit with the "points per view" action in showthread.

He logged off and opened 10 browser windows and then used some sort of program to refresh each window over and over again.

Over a period of time he managed to guest-view his own thread 90,000 times and got himself tons and tons of points.

The psuedo-solution to this problem would be to add "&& $bbuserinfo[userid] > 0" in the showthread.php conditional, but this would disable points for all guest views and would encourage members to create duplicate registered accounts to exploit this.

A better solution would be to have some sort of time limit, so they can only get so many views per minute or something.

Currently where we use it, we only give .01 or .1 points per view, which would require quite alot of effort for someone to cheat and gain money.