Quick notes:

• "Ouch" JScript error message on stumbit? What is that
• Combine delete form with create form using create form to review and delete created polls. Now can't see what is being deleted and it's redundant.
• use html attribute title tags tool tips on form fields: title="Example: What is your favorite color?"
• Give text fields uniform length
• Pre fill "Vertical Label" text field with "Votes" and eliminate "(usually 'Votes')"
• Eliminate "Name for files" field and auto generate them in script.
• Make "(this can contain spaces)" in first field a title tag tool tip and eliminate it from UI. (It's too obvious to justify the space.)
• Change "Title of this survey (goes over graph):" to "Title over graph"
• Indicate how to excape commas in the questions field.

()-()
 \"/
  `                                                     

ignatz,
Sorry I wasn't clearer. Yes, I was asking for a UI critique. I realize code critiques are more apropos in SOPW but it is a perlscript so I figured I wasn't too OT... mea culpa. The JS in the admin panel is there as a joke for anyone who thought the publicly available admin panel was live. ;}

Thanks for the ideas!
Peas and hominy,
jg
_____________________________________________________
"The man who grasps principles can successfully select his own methods.
The man who tries methods, ignoring principles, is sure to have trouble.
~ Ralph Waldo Emerson

Here is how the exploit works, after I'm presented with the vote menu, and I vote, I click the dreaded browser back button, and I vote again.

If I close the window, and come back to the poll, I will not be presented with the option to vote.

There in lies your logic flaw. You should also check for the cookie if someone tries to vote, not just when presenting the vote menu.

____________________________________________________
** The Third rule of perl club is a statement of fact: pod is sexy.

Thanks podmaster, I discovered that one myself by accident. I will address it in the next version. There are only a couple copies in production so hopefully no one is messing with it too much. I really need to add IP logging as well as one can of course eat the cookie and revote.
Thanks for checking it out!
jg
_____________________________________________________
"The man who grasps principles can successfully select his own methods.
The man who tries methods, ignoring principles, is sure to have trouble.
~ Ralph Waldo Emerson