HTML escape description to prevent code injection onto page

[selectricity-live] / app / models / selectricity_service.rb

diff --git a/app/models/selectricity_service.rb b/app/models/selectricity_service.rb
index ac2ef205261198986e1add69fe7e3178828bad85..3f3e42ed4001796346d06d0278b0f8a8f704dd44 100644 (file)
--- a/app/models/selectricity_service.rb
+++ b/app/models/selectricity_service.rb
@@ -7,7 +7,7 @@ class SelectricityService < ActionWebService::Base
     if election
       voter = QuickVoter.new
       voter.election = election
-      voter.ipaddress = "0.0.0.0"
+      voter.ipaddress = "XMLRPC Request"
       voter.session_id = "XMLRPC:#{voter_id}"
       voter.vote=Vote.new
       voter.vote.votes=vote_list[0]
@@ -65,5 +65,16 @@ class SelectricityService < ActionWebService::Base
     result.candidate_names=candidates.values
     result
   end
-    
+  def get_quickvote_votes(shortname)
+    qv=QuickVote.ident_to_quickvote(shortname)
+    votes=Array.new
+    unless qv
+      return result
+    end
+    qv.votes.each  do |vote|
+      votes << VoteInfo.new(:voter_id => vote.voter.id, :voter_ipaddress => vote.voter.ipaddress, :vote_time => vote.time.to_i)
+    end
+    return votes
+  end
+   
 end