Question

I'm working with the VotePlugin and find that TWikiGuest is allowed to vote if the user has not logged on prior to submitting his or her vote.

Can someone suggest a way to require that the user be logged on before submitting their vote ?

I'm thinking an onSubmit() javascript function would work, but don't know where or how.

Can the equivalent of a requireValidUser directive from httpd.conf be added to a form SUBMIT button via javascript ?

Thanks !

Environment

-- KeithHelfrich - 18 Jul 2006

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

You can put the vote script under authentication (same as edit, save. etc.) The Plugin could be enhanced to optionally deny TWikiGuest users to vote.

-- PeterThoeny - 18 Jul 2006

Of course!! Thank you, because I had not noticed that there is a ../bin/vote script that can be controlled by .htaccess

The plugin still allows a vote by someone who logs in as TWikiGuest with the password guest, so the very clever voter would still be able to pad the poll in his favor by one. To fix that we'd need an update to the plugin.

-- KeithHelfrich - 19 Jul 2006

Is there a directive for .htaccess that can simultaneously require valid-user and deny from TWikiGuest ?

-- KeithHelfrich - 19 Jul 2006

When I check ./twiki/bin/ there is no ./twiki/bin/vote script ? ...

-- ThomasSchodt - 16 May 2008