On Mar 31, 2009, at 11:03 AM, Andy wrote:

>
> I'm creating a site where a profile can be voted on by guest users.
>
> I want to prevent basic fraud by disallowing multiple votes for the
> same profile in one session.
>
> I was thinking about using a session array and checking for the
> profile ID in the session array.
>
> So far, it's not working correctly and I'm not even sure if this is
> the best approach.
>
> Any ideas?
>
> I'm open to new ideas, or at least debugging on my code:
>
>    unless session[:voted_user_ids]
>      session[:voted_user_ids] = Array.new
>    end
>
> unless session[:voted_user_ids].include? params[:voted_user_id]
>    @vote = Vote.create(...)
>    session[:voted_user_ids].push params[:vosted_user_id]
> end

If that's your exact code, it's not working cause you have  
"vosted_user_id" (see that extra 's') in one of your lines...

Also you can replace your first three lines with:

session[:voted_user_ids] ||= []

-philip

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to