Set up basic authentication based on IP address to prevent people from voting multiple times

[JulesLecuir]

Today the app is really beautiful and well designed, but it's such a shame that we can't use it in real case scenarios because no basic security and authentication processes are implemented.

A really quick win could be to save the IP address of voters in the Vote object (and hash if needed to be more respectflul of privacy), so that you can only submit one vote per IP address (make a check on vote submission). I guess this can be really quick to implement and quite effective in limiting cheating.

A second quick win could be to put a basic cookie "hasVoted-<id_of_the_vote>" in local storage to prevent vote if a cookie is present (some stuff needs to be implemented in frontend too, then).

With those two things, we can discourage 90% of voters that could be tempted to vote muliple times.

Thank you !

[domi41]

Hi !

This is a tricky matter.

With the increasing popularity of VPNs and Private Browsing, it's become easy to go around the fences you suggested.
Furthermore, allowing multiple votes on the same IP/browser is considered a feature by "honest" groups of users.

It would create a false sense of security, since only one cheater could skew the results beyond relevance anyway.

If you need to make a poll where users are strongly opinionated and may be expected to try to "cheat", you can use the new burner QR codes feature.