I checked your plugin again. Please don’t be offended, I have no intention of being disrespectful to your work, but it is developed in a very amateur way. Come on guys, there are currently many ways to process data securely. There are projects that require maximum security in the management of questions and answers (like mine for example). A plugin must be developed responsibly. Locking the browser console, right click and source code is not enough. You need to know what you are doing to offer a quality product to the public, especially if it is a paid plugin.
In this case the plugin not only has the flaw that it shows all the answers in the source code, but also (and this is incredible) the source code itself indicates the correct answer. I mean, “answer” – “anser” (??). Man please, this has to be a joke.
Let’s say a user of your plugin has a project similar to mine (involving cash prizes for winners), but doesn’t know anything about web development, installs the plugin and opens the contest. One of the participants has a very basic knowledge of html. He search the source code and answer all the questions correctly. Result of the day: The company goes bankrupt in just hours due to a single user. Do you realize, my friend, how serious it is to release a poorly developed plugin to the public?
Personally (after an extensive search that lasted more than a week) I did not find any plugin that met the requirements of my project, so we spent around 10 days developing one from scratch. It is fully shielded from any attempts to guess the questions through hacking attempts. Of course it does not offer revealing information in the source code, nor in $_POST headers. It doesn’t even reveal the IDs of the items. Everything is handled in the DB and dynamic ajax with nonce checking is used. There’s still a little work left but it looks good so far. If it’s okay for you, we would like to cooperate with you by sending the resulting code to your email. As a courtesy of course.
I will lower this rating, but will be attentive to future improvements to raise it again. All the best.
Dario.
