fix security issue

[selectricity-live] / app / views / voter / thanks.rhtml

diff --git a/app/views/voter/thanks.rhtml b/app/views/voter/thanks.rhtml
index b19cb04e694bdab2a0ae88b3e2d9e110fc6d1822..84054d6814a97ddc15c2bbeeecbedfecf180c3f7 100644 (file)
--- a/app/views/voter/thanks.rhtml
+++ b/app/views/voter/thanks.rhtml
@@ -6,8 +6,21 @@
 <p>Your vote has been recorded for the <strong><%= @voter.election.name
 %></strong>.</p>
 
+<% if @voter.election.verifiable %>
 <p>Your unique token for this vote is: <strong><%= @voter.vote.token %></strong></p>
 
-<p>Please record this token for your records and keep it secret. You
-will be able to use this token to verify that your vote was used in the
-election and that your vote was recorded correctly.</p>
+<p>Please record this token for your records and keep it secret. This is
+<strong>not</strong> the same token that you received in email. At the
+end of the election, you will be able to use this token to verify that
+your vote was used in the election and that your vote was recorded
+correctly.</p>
+<% end %>
+
+<% if @voter.election.kiosk? and params[:kiosk] == 'true' %>
+
+<p>Please click the done button below when finished to reset the system
+for the next voter.</p>
+
+<%= button_to "Done", :action => "kiosk_ready", :id => @password, :kiosk => true  %>
+
+<% end %>