Benjamin Haskell wrote:

> On Wed, 31 Aug 2011, Charles Campbell wrote:
> 
> > Charles Campbell wrote:
> >> Hello!
> >> 
> >> I recently checked my plugins' ratings:
> >> 
> >> 08/09/11 script  677/279/10776: Manpageview.vim
> >> 08/31/11 script -133/1094/10866: Manpageview.vim
> >> 
> >> This seems like an odd thing -- is this preparation for a general 
> >> bombing of plugins' ratings?
> > I should explain this a bit more.  The rating for Manpageview on 
> > August 9, 2011 was 677, with 279 people having rated it, and 10776 
> > having downloaded it.
> > On August 31, 2011, the rating was -133, 1094 people having rated it, 
> > and 10866 having downloaded it.
> >
> > It is odd that Manpageview received -810 in karma when there were only 
> > 90 additional downloaders over that time period.  Did irc have a 
> > anti-Chip attack?  Is someone testing a bot to destroy  multiple 
> > plugins' ratings?
> 
> Can't find it currently, but someone mentioned in the not-so-distant 
> past that some search engine(s) grabbed the down-vote URL when crawling 
> www.vim.org.  In this case, googling:
> 
>       site:www.vim.org inurl:unfulfilling
> 
> (where 'unfulfilling' is the 'rating' value for a down-vote) comes up 
> with exactly one result for me:
> 
>       ManPageView - Viewer for manpages, gnu info, perldoc, and php …
> 
> With the link: (...'s to prevent clicking)
> 
>       http://.../scripts/script.php?script_id=489&rating=unfulfilling
> 
> And I may have accidentally just downvoted it myself, by hovering over 
> the result (which pops up a preview).
> 
> Seems like the ratings should only use $_POST (PHP var), but they appear 
> to be using $_GET, too.

Right, the form was using a GET.  That's wrong.  I changed it to a POST
now.  Please verify the rating still works.

I found another one on the page where a script delete is confirmed.
Fixed that too.

-- 
BLACK KNIGHT: I'm invincible!
ARTHUR:       You're a looney.
                 "Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD

 /// Bram Moolenaar -- b...@moolenaar.net -- http://www.Moolenaar.net   \\\
///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\  an exciting new programming language -- http://www.Zimbu.org        ///
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///

-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

Raspunde prin e-mail lui