Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
The poll modules saves hostnames/ ip address of anonymous votes. From a privacy point of view there should be a configuration option to not save ip adresses of these anonymous votes (or to throw them away after a resonable time period).
Comment | File | Size | Author |
---|---|---|---|
#6 | Screenshot 2024-03-13 at 10.57.59.png | 82.59 KB | BramDriesen |
#6 | Screenshot 2024-03-13 at 10.54.50.png | 24.53 KB | BramDriesen |
Issue fork poll-744752
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #1
amateescu CreditAttribution: amateescu commentedHow would you allow anonymous voting without storing their hostname/ip?
Comment #2
alexpottPoll is no longer part of core
Comment #3
dakalaNot sure this is an issue. How else would we be able to allow and keep track of anonymous votes? There's the option of not allowing anonymous votes at all. Proposing that this be closed.
Comment #4
dakalaComment #5
BerdirLets keep it open if someone wants to work on it. But yes, I don't see how we'd support anonymous votes then.
Comment #6
BramDriesenAn alternative could be to hash this data in the database? It could be a general setting that applies to all polls on the site.
However, I don't think storing IP addresses is a privacy concern as they don't really tell something about the user.
For example the webform module is also storing IP addresses with each submission. It does have a setting to disable this (on general level for all, or per webform setting).
They are doing unique checks in a different way as us. They check on UID or a cookie value.
Comment #7
BerdirWhich is essentially what the anonymous voting issue does, it adds ip/session/nothing as options, so once that is done, then this could be implemented on top of that if an option other than hostname is selected.
Comment #8
samit.310@gmail.com CreditAttribution: samit.310@gmail.com at Srijan | A Material+ Company for Drupal India Association commentedComment #9
BramDriesenAah yes, totally forgot about that one when going through the backlog :) linking it together helps!