<div dir="ltr"><div>Hi Laurențiu and Greg,</div><div><br></div><div>> but you can use the X-Forwarded-For or CF-Connecting-IP headers to find out the real IP of the client.</div><div><br></div><div>That's correct, and I guess it's the right way. </div><div>But for the rating specifically, we need to store them in the DB if we want to correctly manage the rating abuse which requires a another discussion and as mentioned by Regis earlier: "This feature would
open the gate to a bunch of security / privacy /compliance issues
that I don't thing we want to add complexity right now, as this is
one strength of QGIS, to have no link with our public
infrastructure and no personal data collection. "</div><div><br></div><div>> Stepping back, why does the QGIS project feel the need to support a<br>
rating system for third-party code at all?<br><br></div><div>Unfortunately, I don't have the direct answer to that. I was involved in
implementing download statistics by country for each plugin and I think
this is similar. Basically, they provide insights/metrics for
plugin developers and maybe for users as well.</div><div><br>> Why not just remove all rating data, and remove the code in qgis to<br>
fetch ratings and vote?</div><div><br></div><div>Technically, that aligns with part of my suggestion earlier. However, this should include (re)-implementing a clean proper rating system that requires users to be authenticated and leave a comment, which would help plugin developers improve their plugins as Denis and Nyall mentioned.</div><div><br></div><div>Best regards,</div><div><br></div><div><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="color:rgb(34,34,34)">Lova Andriarimalala</div><div style="color:rgb(34,34,34)"><b>QGIS Full Stack Developer <br><br></b></div><div style="color:rgb(34,34,34)"><b>T </b>: +27(0) 87 809 2702 <b>E </b>:<b> </b><a href="mailto:lova@kartoza.com" style="color:rgb(17,85,204)" target="_blank">lova@kartoza.com</a> <b>W</b> : <a href="http://kartoza.com" style="color:rgb(17,85,204)" target="_blank">kartoza.com</a><br></div><div style="color:rgb(34,34,34)"><br></div><div style="color:rgb(34,34,34)"><div><img src="https://erp.kartoza.com/files/KartozaEmailSignatureTest.gif"><br></div><div><br></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 19 Aug 2026 at 13:35, Greg Troxel via QGIS-Developer <<a href="mailto:qgis-developer@lists.osgeo.org" target="_blank">qgis-developer@lists.osgeo.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Lova Andriarimalala via QGIS-Developer <<a href="mailto:qgis-developer@lists.osgeo.org" target="_blank">qgis-developer@lists.osgeo.org</a>><br>
writes:<br>
<br>
> Following the plugin rating abuse issue reported at<br>
> <a href="https://github.com/qgis/QGIS-Plugins-Website/issues/416" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/issues/416</a> and<br>
> <a href="https://github.com/qgis/QGIS-Plugins-Website/issues/420" rel="noreferrer" target="_blank">https://github.com/qgis/QGIS-Plugins-Website/issues/420</a>, I wonder if<br>
> someone could help or share some thoughts about it.<br>
<br>
Stepping back, why does the QGIS project feel the need to support a<br>
rating system for third-party code at all?<br>
<br>
Why not just remove all rating data, and remove the code in qgis to<br>
fetch ratings and vote?<br>
<br>
_______________________________________________<br>
QGIS-Developer mailing list<br>
<a href="mailto:QGIS-Developer@lists.osgeo.org" target="_blank">QGIS-Developer@lists.osgeo.org</a><br>
List info: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
Unsubscribe: <a href="https://lists.osgeo.org/mailman/listinfo/qgis-developer" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a><br>
</blockquote></div>