By using this site, you agree to our Privacy Policy and our Terms of Use. Close

yeah it's pretty easy to hack the voting system.

If you have any debugging tools on your browser (such as firebug) you can simply change the "value" field of any of the checkboxes and it appears the voting script will simply take that value. You can even give a game a negative score, which I did on some crappy game here just to test it out:

http://www.vgchartz.com/games/game.php?id=4778

This goes to show, ioi, that you should ALWAYS do sanity checks on your incoming data, especially if it comes from an untrusted source (such as a website) since it's very easy to change these things. This kind of stuff should be implemented with server side checking, your vote script should make sure that the value is valid before accepting it.

I recommend you reimplement the voting script and reset the votes.



Help! I'm stuck in a forum signature!