November 2007 Archives

I went to vote at Golden Spider's public vote page. First of all they have this gem:

 In this years Golden Spider awards, the judges will select the winners from all twenty categories, including the Best Blog and Best Social Networking site categories. We would also like to get YOUR opinion on the best Blog and social networking site categories. Choose from the nominations below, enter your email address and submit your vote.

This me reads very much like "Our judges know best, but we want you to feel loved". I submitted my vote anyway and got the lovely "Your Vote has been cast. Thank you for voting on both Categories." page. Out of boredom I viewed the source, and spotted the following:

<div class="display_none">
<form name="PublicVoting" method="post" action="publicvote.php" onsubmit="return validatePV();">
.....

I disabled CSS, selected two different options, entered a different email and it gladly accepted the new details. They do actually check to make sure that the email address you enter is used only once, but I have an infinite number of email addresses to use as they don't seem to verify the emails.

To the developers of the Golder Spiders Website, please go and read the Wikipedia article on Security Through Obscurity. Not everyone uses CSS, prime example being blind people who use screen readers!