Gargaj/wuhu

votekey registration is racy

kusma opened this issue · 0 comments

kusma commented

In include_register.php, the votekey is checked once, and then the user gets created and the votekey updated. This can allow a votekey to be double-spent, creating multiple users per votekey.