CODEWITHSUNDEEP
authenticationcookiesip-addressvoting-system
enigma
enigma

Reputation: 3491

Limiting an action to once per guest user (without log in)

To aid engagement, it would be preferable to allow users who are not logged in to a website to vote on a topic. Obviously this should be limited to one vote per user per topic. I am well aware that the ideal solution would in fact be to force users to log in or create an account, but (partly as a challenge) I would like to avoid this.

My research so far has pointed to some combination of the following:

What have I missed? I'm aware that this isn't ideal, but is there any kind of protocol for this?

Upvotes: 0

Views: 42

Answers (1)

tstark81
tstark81

Reputation: 488

Without authentication, there is no way to do that in a way that would rule out bots.

But I believe there is a middle ground that could work.

Since they will be anonymous votes, try to come up the two numbers below:

  • rate of anonymous votes per minute from an IP you would be comfortable to just let it happen, regardless if it is a person or a bot.

AND

  • rate of anonymous votes per minute a specific topic/pool can get. This can be a higher number, but it will help control bots that use multiple IPs to vote.

And if any of those rates are met, you just inform the user that the limit of anonymous votes per minute was reached and they have to wait a bit or register.

That way you still get engagement from those users without worrying too much with bots.

Upvotes: 1

Related Questions