There are 8 layers of vote protection
- IP address check
- Unique ID for each vote
- User ID
- Email confirmation
- Disposable email domain checker
IP address check
An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g., computer, iphone, internet router) participating in a computer network that uses the Internet Protocol for communication. Every single IP address can be used only once for one vote. IP address check is optional, but highly recommended.
WP Nonce – Unique ID for each vote
WordPress uses a very powerful tool named WP NONCE. It is unique ID which can be used only once. This tool can not be falsified and because it can be used only once it is 100% protection against bots and automatic scripts. We use this tool a lot. Not only to secure votes and also to secure every image upload, every user login and every form in our contest.
User ID can be used as protection if is set vote option to “Registered users”. This control is disabled when vote setting is set to”Everyone”. User ID is unique for every single registered user so every ID is stored and controlled before vote. This protection is optional.
HTTP cookies is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. So after vote is send small information to browser, that vote was successfully counted and is not possible vote from the same browser again.
Email confirmation is very powerful voting protection. This setting is optional so if is allowed every single non registered user must confirm his vote by email address. Email is also compared with already used emails in voting process and it is not possible vote for the same image from the same email address twice.
Disposable email domain checker
This email checker contains a list of disposable and temporary email address domains (over 2100) often used to register dummy users in order to create fake votes. List of domains is constantly updated by the community on GitHub. With this checker is not possible to create contest user or confirm the vote with disposable email services.
Function of PHP protection is controlled bridge between all protections. Check and compare all protections a provides stability of voting process