On Mar 31, 2009, at 11:03 AM, Andy wrote:
> > I'm creating a site where a profile can be voted on by guest users. > > I want to prevent basic fraud by disallowing multiple votes for the > same profile in one session. > > I was thinking about using a session array and checking for the > profile ID in the session array. > > So far, it's not working correctly and I'm not even sure if this is > the best approach. > > Any ideas? > > I'm open to new ideas, or at least debugging on my code: > > unless session[:voted_user_ids] > session[:voted_user_ids] = Array.new > end > > unless session[:voted_user_ids].include? params[:voted_user_id] > @vote = Vote.create(...) > session[:voted_user_ids].push params[:vosted_user_id] > end If that's your exact code, it's not working cause you have "vosted_user_id" (see that extra 's') in one of your lines... Also you can replace your first three lines with: session[:voted_user_ids] ||= [] -philip --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---

