Users Not Logged in are able to report scores
December 26, 2011 in
As a result, there are now hundreds of false scores reported under user-id=0 that need to be cleaned up.
Report sequence needs to be fixed so that users who are not logged in are not able to report.
Related posts:
Shaun MacRae said on January 7, 2012
This is mind boggling. 3602 reports to Rico’s Tennis Academy – all against you – all by a member not logged in – all over the christmas period.
Someone was bored
Shaun MacRae said on January 7, 2012
query
SELECT * FROM `cn_results` WHERE `player_one_id` = 0 AND `player_one_id_bp` = 0 AND `player_two_id` = 0
Brent Johner said on January 7, 2012
Please delete them. Please accept only reports from members who are logged in.
Shaun MacRae said on January 10, 2012
Records deleted. Still blows my mind that someone sat there for hours and hours reporting over 3000 false scores. Hopefully there is not a bigger issue we are missing.
For the record, this is not actually a problem for premium private groups (must be logged in to report scores). It’s only a problem for free public groups (scorekeeping wasn’t implemented for these).
Brent Johner said on January 10, 2012
Could it have been a robot?
Shaun MacRae said on March 31, 2012
I actually started thinking robot after it happened again on Mar 23.
I still can’t believe that someone would sit for ~15 hours reporting scores over and over again. Many of them could have been a quick F5, but if you look closely, the reports are not all the same.
If it was Chris Johnson, is he the type to have written a script/program to do it?
If it was a bot, what are the chances the bot would be smart enough to submit scores like 97-0 and 98-0? These scores are reserved for defaults and forfeits.
I’ve deleted the 988 records from Mar 23. I’ve made all groups that have reporting functionality premium/private. Closing this issue.