|
Fractional ratings for comments
|
|
By Defect , Section Code []
Posted on Fri Dec 15, 2000 at 12:00:00 PM PST
|
 |
By adding and manipulating a couple variables in the get string request, a user can rate comments in fractions as opposed to the default integers [0..5].
Not a serious bug, all the details i could come up with are below, as well as some side-notes regarding abuse of the GET string in scoop with respect to comment rating.
|
By adding the two variables and values :
rating_[COMMENT #]=[RATING VALUE]
and
rate=Rate%20All
to the end of a url (as long as it has sid and op set correctly) you can give the comment (comments, if you add more than one rating_[#]) [COMMENT #] any rating you want (fractional or otherwise), as long as it is between 0 and 5 (or 1 and 5 if the user is not trusted).
For examples of the result, go to my last bug report. The two comments (that are not mine) have fractional values (3.73, 4.04) and have only been rated by one person, me (if the values are different, then someone else rated them as well, so the example loses all meaning, sorry.)
If you want to see this for yourself, go to a story that has an unrated comment (diaries work best) and find the # of an unrated comment. Let's say the comment number is '1' and you want to rate it 3.99 : add "&rating_1=3.99&rate=Rate%20All" to the end of the url for the story (excluding quotes of course). When the page reloads, the comment will have the rating 3.99 and the drop down will show that you voted '4'.
This is not a serious bug, i tried to abuse it several ways to see if i could. Tried to rate my own comments by filling in my comments ID, doesn't work. Had an untrusted coworker try to rate comments lower than 1, doesn't work. Tried to rate comments lower than 0 and higher than 5, they just default to either min/max number.
One related thing to note: by adding a correct pid to the url and the two above variables you can rate comments that are nested several levels without actually going to them. it's not a bug so much as just a pointless i'm-too-lazy-to-go-read-comments-that-deep-but-i-really-really-want-to-rate-em-anyway hack. (it just occurred to me, since it makes it easier to rate comments by cutting the time to rate in half or more, it makes it easier for malicious (or benevolent, but i haven't seen many of those) users to mass rate a thread or user's comments to a certain number.) |
|
|
Story Views
|
|
17 Scoop users have viewed this story.
|
|
