Bug Thread Ratings

[Fleep]

Thread Ratings voting Exploit

Hey there DBTech so I installed Thread Ratings Lite yesterday and I've been testing it out.
So one of my moderators sent me this message "The idea is perfect but it took 5 seconds to exploit it, it's a simple javascript but the server won't check for the ratings given. I just gave your feedback thread a rating of 35 to prove the point" with that said It seems like he just recalled the function and put any value he wanted there.

So my request I guess is can you add some sort of check to force the value between 1 and 10.

Thanks for your help.

Fleep

 

[Dylan]

Thanks for catching that. I did a hotfix to fix this issue. If you redownload the package and upload dbtech/thread_ratings/actions/ajax.php they shouldn't be able to do it anymore

 

[Fleep]

Seems to work well, Thanks a lot for the fix Dylan.

Fleep