[RELEASE] Vote for DP script (WORKING)

06/26/2014 00:25 Penchod-Shaiya#16
Quote:
Originally Posted by Mithrandir. View Post
Yes it's exploitable but it need a little bit more work than just press a button^^
Instead of posting it here, make a tutorial how to do it and do it on my script, would love to see your account getting more than 200 DP a day :)

.................................................. ................

And yeah, I don't see how this is off topic lol....
06/26/2014 01:09 RealChew#17
In fact, to fix that (the possibility to obtain APs after the click on the script and without send the vote), you mustn't give the APs directly on the scripts.
When the player voted, he's redirected to the ranking website without obtain any points.

After, the player must click on your server link from the ranking website and he's now anew on your website.

From there, you need to code an other verification using php HTTP_REFERER.
If HTTP_REFERER return the ranking website URL and the time limit is exceeded , it's ok, the player has voted so you can give him his points.

Of course, it's just a simplified scheme, you must adjust that.

However, I don't think it's possible to having a voting script 100% unexploitable but this method is more difficult to exploit than others.

nota : you should also have a member's area, the player's must be logged to detect his UserID when he's return on your website.
06/26/2014 09:47 Penchod-Shaiya#18
Quote:
Originally Posted by RealChew View Post
In fact, to fix that (the possibility to obtain APs after the click on the script and without send the vote), you mustn't give the APs directly on the scripts.
When the player voted, he's redirected to the ranking website without obtain any points.

After, the player must click on your server link from the ranking website and he's now anew on your website.

From there, you need to code an other verification using php HTTP_REFERER.
If HTTP_REFERER return the ranking website URL and the time limit is exceeded , it's ok, the player has voted so you can give him his points.

Of course, it's just a simplified scheme, you must adjust that.

However, I don't think it's possible to having a voting script 100% unexploitable but this method is more difficult to exploit than others.

nota : you should also have a member's area, the player's must be logged to detect his UserID when he's return on your website.
you can simply fix it by donating a small amount of $$ to xtremetop100 and ask them to make your button different by handing them the .php files for the button, that way your button won't need re-chapta and it will redirect directly after being pressed... Only way to fix it so it votes the second you press the submit button is having access to the voting script page and editing it.

Anyways my votes went up from 30 each reset to 100+ after i created this and added to server, I'm happy with this same goes to my player :) Good luck everyone!
10/24/2014 12:46 bar2eldad#19
Can Someone Re-Upload Please . Thanks .