The Poll MOD changes to inc_func_common.asp include a funtion called GetVote. This is designed to determine if the user has already voted for a poll question before being allowed to cast that vote.
The function works correctly if called from Topic.asp but it fails when called from inc_poll.asp with the result that guest cookies are not properly checked. That is, a guest can be shown a 'Featured Poll' that he has already voted on, cast another vote and then be told he can only vote once per poll.
The problem is that the cookie tests in that function use the TOPIC_ID variable which has not yet been defined when inc_poll.asp is given control. Since the function requires the topicID as a parameter (which it calls pTopic_ID) the function should use pTopic_ID instead of TOPIC_ID.
Thus, around line 82 in inc_func_common.asp now contains:
cpoll = Request.Cookies(strCookieURL & "poll")("" & Topic_ID & "")
if instr(cpoll, Topic_ID) > 0 then
Should be changed to:
cpoll = Request.Cookies(strCookieURL & "poll")("" & pTopic_ID & "")
if instr(cpoll, pTopic_ID) > 0 then
The same change should be made at around line 98.
Topic Locked
Posted - 10 August 2005 : 08:27:48
