preventing cross site voting & validating answers [Updated]

There is a current flaw in wp-polls that allows people to embed the following into a page:
http://example.com/wp-admin/admin-ajax.php?action=polls&view=process&poll_id=POLLID&poll_POLLID=ANSWER&poll_POLLID_nonce=POLLNONCE

This allows exploiters to get votes from people who have not even visited the WordPress site. I exploited this on a WordPress site, and got 318k votes by embedding the link into various forum signatures. However, since the poll answer is a GET variable, the actual answers went to 0%. It is because the votes were not counted as answers, but still added to the total votes. I added an if statement that checks if the poll answer is legitimate. This prevents fraudulent answers, and cross site voting.

There is a current flaw in wp-polls that allows people to embed the following into a page:
http://example.com/wp-admin/admin-ajax.php?action=polls&view=process&poll_id=POLLID&poll_POLLID=ANSWER&poll_POLLID_nonce=POLLNONCE

This allows exploiters to get votes from people who have not even visited the WordPress site. I exploited this on a WordPress site, and got 318k votes by embedding the link into various forum signatures. However, since the poll answer is a GET variable, the actual answers went to 0%. It is because the votes were not counted as answers, but still added to the total votes. I added an if statement that checks if the poll answer is legitimate. This prevents fraudulent answers, and cross site voting.

Add question to Log and correct error if using hooks

poll_log_show_log_filter

prevents PHP error under certain circumstances

Revert "When using the poll on mobile, this message gets lost "You Had Already Voted For This Poll" because poll total height shrinks."

This reverts commit ad2b7d5d.

When using the poll on mobile, this message gets lost "You Had Alread…

When using the poll on mobile, this message gets lost "You Had Already Voted For This Poll" because poll total height shrinks.

Added a wrapper class to help style this message

SQL injection fixes.

Fix possible rDNS SQL injection. Use ->prepare() where appropriate. Use esc_sql() instead of addslashes(). Whitelist ORDER BY and SORT BY SQL injection vectors.

get correct poll ID for a poll starting in the future

fix PHP notices

Correctly display poll ID and shortcode for poll starting in the future.