LastFVS - Feature Request Voting System

(edit)

So I'm not able to vote anymore and it seems that everybody is an administrator or moderator (so I am)...

Does anybody from the Last.fm-staff look at the statistic?

should be fixed now.

How about using the last.fm accounts as credentials?

you set up a login page that refers to the last.fm authentication form after getting a token and generating an authentication url as it says there, after that you get the session key and save it as a cookie to your domain.

as long as the cookie is set, then the user is logged in. when he/she attempts to perform an action (casting a vote or suggesting something new), you use the session key from the cookie to call user.getInfo and retrieve the username and use it as a unique user id.

and when you add a vote to the database, you add it as a row in a table along with the unique username to preserve the user's identity so that he/she couldn't vote more than once on the same idea, instead of adding the vote as just an increment in a numeric field.

not only would that provide the needed security but it would also let you know who voted what on what, plus it integrates nicely with last.fm.

you could also add an option reserve the user's anonymity upon casting a vote or adding an idea and not show his/her username then.

the current security mechanism uses sessions to make sure that the user doesn't vote more than once which can be hacked around very easily by removing the cookie or disabling them at all.
also you could replace the "pro" and "con" by a thumbs up and a thumbs down icons. that would be nicer.

you could also combine the pro and con votes to a total of (pros - cons) and show the result. remove the date column since it's not very useful and remove the status feature column too, a status report can be achieved by having one of the staff comment on the idea saying if it's being implemented.

and having access to the last.fm username you could pull from the webservices all sorts of data, like the avatar to be posted next to the name in the comments and maybe the total track playcount or anything else you may see fit. that would be really neat.

Just create a dummy account for the second api key. Sorry we don't support multiple accounts atm. amrhassan's auth idea is great.

up!! I think it is an important toppic to get this thing done!

Looking good. If you want any help with the frontend I can do something to make it look a little cleaner. Give me a message back if you would like it done.

group is now open for everyone, my apologies I didn't to that when creating the group.
Feel free to post all stuff regarding LastFVS there which is in your mind :)
lotrgamemast helps me with the page and he does pretty good work! Looks really nice what I saw :)

everyone who is interested can (now) join the lastfvs group :)
please do some discussion/take part of those in there :) we need suggestions and critcs :)

the redesign of the source code is still in progress, but most things, like logging in via last.fm account(sets a cookie with a unique session id for you by last.fm) and adding new features is already done.

what you can see at the link is the OLD version, but I think we'll take over the database and with that the votes and suggestions you made :)

your ideas were migrated successfully in our new database system ;)

(edit)