<div dir="ltr"><div>Hi Nyall,</div><div>> <span class="gmail-im"></span>I'd be +1 to that. For me, a bad rating with no reason gives the<br>
plugin authors no help to improve, and becomes a permanent black mark<br>
against a plugin that can never be removed. It'd be great if requiring<br>
logged in users for ratings would also allow users to change an<br>
existing rating (eg when the author responsively fixes a bug).</div><div><br></div><div>Thanks for the feedback and the suggestion. I will take note of that.</div><div><br></div><div>> I think that feature can be safely removed without a QEP. It's been<br>
basically broken in the qt6 builds anyway (it's fallen back to a weird<br>
slider widget which doesn't make sense). And it's not like removing it<br>will break any critical workflows for users.</div><div><font color="#000000"><br></font></div><div><font color="#000000">Removing it would then be more like a simple change. Thanks for letting me know.</font></div><div><font color="#000000"><br></font></div><div><font color="#000000">Best regards,</font></div><div><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="color:rgb(34,34,34)">Lova Andriarimalala</div><div style="color:rgb(34,34,34)"><b>QGIS Full Stack Developer <br><br></b></div><div style="color:rgb(34,34,34)"><b>T </b>: +27(0) 87 809 2702 <b>E </b>:<b> </b><a href="mailto:lova@kartoza.com" style="color:rgb(17,85,204)" target="_blank">lova@kartoza.com</a> <b>W</b> : <a href="http://kartoza.com" style="color:rgb(17,85,204)" target="_blank">kartoza.com</a><br></div><div style="color:rgb(34,34,34)"><br></div><div style="color:rgb(34,34,34)"><div><img src="https://erp.kartoza.com/files/KartozaEmailSignatureTest.gif"></div></div></div></div></div><br></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Wed, 19 Aug 2026 at 13:12, Nyall Dawson <<a href="mailto:nyall.dawson@gmail.com">nyall.dawson@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Wed, 19 Aug 2026 at 19:56, Lova Andriarimalala via QGIS-Developer<br>
<<a href="mailto:qgis-developer@lists.osgeo.org" target="_blank">qgis-developer@lists.osgeo.org</a>> wrote:<br>
><br>
> Hi Régis and Denis<br>
><br>
> Thank you for the input. I agree that shifting to authenticated ratings with a proper comment system makes the most sense given the current situation.<br>
><br>
> With that change, I wonder if it wouldn't be simpler to start with clean rating records for all plugins rather than migrating those who rated with an account from the current obsolete ones. This will prevent recalculating all ratings based on the new rule or considering removing any rating based on abuse (which is difficult to determine) if we even choose to keep the obsolete records. With clean records, we could easily add the mandatory constructive comments feature as Denis suggested.<br>
<br>
I'd be +1 to that. For me, a bad rating with no reason gives the<br>
plugin authors no help to improve, and becomes a permanent black mark<br>
against a plugin that can never be removed. It'd be great if requiring<br>
logged in users for ratings would also allow users to change an<br>
existing rating (eg when the author responsively fixes a bug).<br>
<br>
><br>
> On the QGIS Desktop side, this change will most likely require a QEP first because the existing feature in current and previous versions will break and I am not familiar with how to handle that.<br>
<br>
I think that feature can be safely removed without a QEP. It's been<br>
basically broken in the qt6 builds anyway (it's fallen back to a weird<br>
slider widget which doesn't make sense). And it's not like removing it<br>
will break any critical workflows for users.<br>
<br>
Nyall<br>
<br>
<br>
><br>
> I can also prepare a detailed plan for the changes and announcement accordingly.<br>
><br>
> Best regards,<br>
> Lova Andriarimalala<br>
> QGIS Full Stack Developer<br>
><br>
> T : +27(0) 87 809 2702 E : <a href="mailto:lova@kartoza.com" target="_blank">lova@kartoza.com</a> W : <a href="http://kartoza.com" rel="noreferrer" target="_blank">kartoza.com</a><br>
><br>
><br>
><br>
> This email and any attachments are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you<br>
> have received this email in error, please notify the sender immediately and delete it from your system. Unauthorised use, disclosure, or copying<br>
> of the contents is prohibited.<br>
><br>
><br>
> On Wed, 19 Aug 2026 at 10:43, Régis Haubourg <<a href="mailto:regis.haubourg@gmail.com" target="_blank">regis.haubourg@gmail.com</a>> wrote:<br>
>><br>
>> Hi, and thanks for the very clear situation overview Lova!<br>
>><br>
>> Firefox requires to log to be able to rate. I concur with Denis. Anonymous voting is now obsolete to me, as the ecosystem has grown and many companies rely on this ecosystem.<br>
>><br>
>> I would have no problem with a communication campaign announcing that rating is no more authorized for anonymous accounts, and should only be done from the website, as I don't think we want to add a sign in feature from QGIS desktop itself. This feature would open the gate to a bunch of security / privacy /compliance issues that I don't thing we want to add complexity right now, as this is one strength of QGIS, to have no link with our public infrastructure and no personal data collection.<br>
>><br>
>> So, I guess that would mean that we remove the rating feature from QGIS desktop and that the voting button only opens the web app at the right place.<br>
>><br>
>><br>
>> Best regards<br>
>><br>
>> Régis<br>
>><br>
>><br>
>><br>
>> On 19/08/2026 09:16, Denis Rouzaud via QGIS-Developer wrote:<br>
>><br>
>> Hi,<br>
>><br>
>> We switch to osgeo logged-in users only and force to have a (constructive) comment?<br>
>> Otherwise votes are meaningless and useless I'd say.<br>
>><br>
>> Cheers,<br>
>> Denis<br>
>><br>
>> Le mer. 19 août 2026 à 09:07, Lova Andriarimalala via QGIS-Developer <<a href="mailto:qgis-developer@lists.osgeo.org" target="_blank">qgis-developer@lists.osgeo.org</a>> a écrit :<br>
>>><br>
>>> Hello everyone,<br>
>>><br>
>>> Following the plugin rating abuse issue reported at <a href="https://github.com/qgis/QGIS-Plugins-Website/issues/416" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/issues/416</a> and <a href="https://github.com/qgis/QGIS-Plugins-Website/issues/420" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/issues/420</a>, I wonder if someone could help or share some thoughts about it.<br>
>>><br>
>>> We have released some fixes to enforce throttles (<a href="https://github.com/qgis/QGIS-Plugins-Website/pull/418" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/pull/418</a>), reject forged cookies and add a cap votes per address (<a href="https://github.com/qgis/QGIS-Plugins-Website/pull/423" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/pull/423</a>). However, it is not fully working because every IP recorded against a vote is a Cloudflare edge IP, not a real user IP. I checked 100 recent votes against Cloudflare's published ranges: 100 out of 100 match. So the per-IP cap is counting Cloudflare's proxy pool, which rotates per request. So, storing real client IPs would probably require some discussions regarding GDPR and retention angle.<br>
>>><br>
>>> The reporter also asks us to (a) purge the fake votes and recompute the affected plugin scores, and (b) require a logged-in account to vote. Both are policy calls, not just code. And noting that the latter will probably break how the QGIS Desktop plugin manager submits ratings anonymously over XML-RPC.<br>
>>><br>
>>> Thanks so much in advance for any input.<br>
>>><br>
>>> Lova Andriarimalala<br>
>>> QGIS Full Stack Developer<br>
>>><br>
>>> T : +27(0) 87 809 2702 E : <a href="mailto:lova@kartoza.com" target="_blank">lova@kartoza.com</a> W : <a href="http://kartoza.com" rel="noreferrer" target="_blank">kartoza.com</a><br>
>>><br>
>>> _______________________________________________<br>
>>> QGIS-Developer mailing list<br>
>>> <a href="mailto:QGIS-Developer@lists.osgeo.org" target="_blank">QGIS-Developer@lists.osgeo.org</a><br>
>>> List info: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
>>> Unsubscribe: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
>><br>
>><br>
>> _______________________________________________<br>
>> QGIS-Developer mailing list<br>
>> <a href="mailto:QGIS-Developer@lists.osgeo.org" target="_blank">QGIS-Developer@lists.osgeo.org</a><br>
>> List info: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
>> Unsubscribe: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
><br>
> _______________________________________________<br>
> QGIS-Developer mailing list<br>
> <a href="mailto:QGIS-Developer@lists.osgeo.org" target="_blank">QGIS-Developer@lists.osgeo.org</a><br>
> List info: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
> Unsubscribe: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
</blockquote></div>