Hi, my users have found a few exploits already...
1) Points per Character - I'm sure this has already been brought up, but if you give points per character in a post, users can just post a large amount of characters (copy and paste), post, and then edit it out before anyone sees.
2) Points per Thread View - Some users of my forum (not even a day after I put up the eStore), have created scripts to simply view a thread repeatedly, thus not only increasing their points rapidly, but also creating a DDoS attack to the server (since they also shared the script with their friends)
3) untested.. Points for Birthday - I have yet to test this, but if you set your birthday to the *next* day, and then when that day comes, you change the birthday again to the *next* day, so free points everyday
4) Points for Registration/Referral - of course if somebody is so inclined they could create a lot of accounts using a person as the referrer and mass up points this way.
Great work on the script thus far, but these are just some ways that it can be "exploited."
|