How to break: you may be able to use the back button if cookies aren’t being set. This method (medium security) means that the form will push the data through the body of the request and will not show in the URL. Honestly, no reputable contest will be built this way because it isn’t 2006, but hey, you never know… A Web Form Built with the POST method

Post that link anywhere you can and every click will equal a vote.

Hide the cookies and IP address if they are tracking. How to break: Find that URL and go ham on the refresh button. This method (low security) means that the form will push the data into the URL and you will see it. Here are the most common building technical: A Web Form Built with the GET method Online voting competitions will use a variety of ways to track votes through a website. Click To Tweet Step 1: Figure out how it is built Wow! just wrote the guide on how to beat most nonprofit online voting contests. It is not a service WW offers nor will ever offer. NOTE Whole Whale does not cheat on behalf of our clients. However, in an effort to scare the pants off of people creating these contests I decided to create this guide. In the worst case scenario, one organization decides to cheat because the system is designed with flaws by some marketing firm and they see a way to easily game the system to win money for their great cause. I am not justifying or endorsing cheating – I actually believe the only way to win these contests is by not playing. What’s more, they run the risk of burning out the supporters of these great organizations. The problem with voting competitions is that they pit nonprofits against each other for a prize that usually doesn’t come close to the true cost of the votes that these organizations push to get. That’s why I’ve set out to create the definitive guide on breaking (/cheating) poorly designed nonprofit voting competitions. Window.addEventListener('load', function() else if (’s no secret that I’m not a fan of voting competitions, especially ones that are built irresponsibly. Open the form in a tab and watch it do the work.

Create a new script, and replace all the content with the code below.

Click on the icon that appeared in your browser, select 'Dashboard'.

Install the TamperMonkey extension in Google Chrome.

It uses document.querySelector to target the form elements.Īs soon as you'll open the form, it will fill it, submit it, go back to it, submit it, over and over. It only works with the specific form you provided as an example. Here is a dirty script, which could be a starting point.

Google forms bot spam