[RESOLVED] Is it possible to use a direct link to vote for an online poll?

[carloboy]

If you're checking your input with $_POST["poll"], then no, using a direct link won't work because the data would be in $_GET.

I've used a local form to spoof data to an online receiving script (for benign testing purposes) once though. It's as simple as making an HTML file with <form action="http://example.com/poll.php" method="post"> You could prevent this by checking that the submission is coming from your own domain. I think that would go something like this:

$fromDomain = parse_url($_SERVER['HTTP_REFERER']);

if($fromDomain['host'] != "mydomain.com"){
  //didn't come from my domain, don't process
}

Or... you could just be having a problem with SPAM BOTS...

yeah i was thinking i was getting spammed, it's wierd that it choses 1 specific answer.

alright i'll go ahead and try for a domain check on the script



if you find anything that circumvents the regular post please let me know!

I appreciate the help ^^