Set up basic authentication based on IP address to prevent people from voting multiple times
JulesLecuir opened this issue · 0 comments
Today the app is really beautiful and well designed, but it's such a shame that we can't use it in real case scenarios because no basic security and authentication processes are implemented.
A really quick win could be to save the IP address of voters in the Vote object (and hash if needed to be more respectflul of privacy), so that you can only submit one vote per IP address (make a check on vote submission). I guess this can be really quick to implement and quite effective in limiting cheating.
A second quick win could be to put a basic cookie "hasVoted-<id_of_the_vote>" in local storage to prevent vote if a cookie is present (some stuff needs to be implemented in frontend too, then).
With those two things, we can discourage 90% of voters that could be tempted to vote muliple times.
Thank you !