hjarrell / secret-vote

A simple PHP secret voting website

Secret Vote

This is a a damn simple secret voting site. The admin has one password that is hardcoded (for now) and can open and close polls. The users can vote one time. This is enforced using PHP sessions, so they could get around the one vote by using different devices or opening and using and closing incognito.

This came out of my Chapter of Alpha Phi Omega needing an easy secret voting system.

How to setup

1. Setup a webserver with mysql and php by yourself or some hosted service
2. Run the SETUP_DATABASE.sql script
3. Place the .php files wherever your webserver is looking for files (/var/www/html for apache)
4. Login as an admin by going to [whatever your ip is]/admin.php
5. Start and stop polls as needed
6. Refresh to view results

secret-vote's Issues

Update admin page to support poll options

Update the current table to show poll options. Goes with #6 in order however this is more a backend change get the right polls.

Extract out the database credentials to another file

Move the database url,username,pass,dbname to another file that can be imported because trying to change all of them is a mess currently.

Add different voting types

Add different voting types that the admin can choose when creating a poll.

These should include:

• Voting once using browser cookies
• Voting as many times as you want
• Having a password to access the poll

Convert site to a backend/frontend sort of model

Abstract out some of the code so that theres defined HTML/JS/CSS and actual PHP logic rather than the mixture that currently exists.

Add button to remove old polls.

This got broken in v2.0

Voting Intergrity

Voting result should go to third party website that webmaster should not be able to access in order prevent peoples votes from being known or the exact amount of votes known.

Change the design of the database to support poll options

Change the way the database works so that poll options can actually function. Currently only YES, NO, and ABSTAIN are allowed and enforced by an enum.

Add ability to change poll options before publishing a poll

Like having things besides yes,no,abstain.

Vote.php doesn't enforce session checking.

Currently only the index page checks to see if the user has voted before, so technically someone could just keep pinging vote.php to vote.

Update index page to support poll options.

Fix the index page so that varied poll options appear as choices to vote.

Votes do not count if there is an ' in the vote name.

This is an issue because I escape the input going into the table but not when i make the insert vote sql. This can probably be fixed with just a join or in the new vote types branch.

Create a design for the Admin page

Change the design so it isn't just a random textbox and button and an HTML Table.

Need to add compatibility for PHP 5.2

Our very old hosting site uses PHP 5.2. Upgrading the server is not feasible so downgrading the simple voting site would probably be the best option.

current_poll table not getting cleared

On production the current_poll table is not getting cleared leaving the site not being able to add a new poll.

Ensure people only vote once.

Currently people can get around the session block with incognito, clearing cookies, sending requests directly, or using different devices.

Possibly fixes:

• Having n unique keys to give out to n people and have them type it in.
• Having a login system but trusting not to track

Create the design for the voting page

Add actual style to the voting page so it isn't just a basic html form.