Automattic / Automattic/jetpack
Feature Improvement: Throttle multiple consecutive Likes
- Dominant language
- PHP
- Stars
- 1.8k
- Forks
- 898
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 774
Description
Currently, if you were to toggle the Like button found in Jetpack's sharing buttons, a 'Like' notification is sent to the site owner's email and mobile device (if applicable) for each individual Like. This can be a vector for spam/harrassment.
#### Steps to reproduce the issue
1. Go to any test site with Sharing enabled.
2. Click on Like
3. Click on Like again to deselect it
4. Repeat steps 2 and 3 as many times as you need
#### What I expected
I expected that consecutive Likes on the same post by the same user would result in some form of lock out message, such as is seen with comments
#### What happened instead
In my tests, I am able to repeatedly spam the Like button and send as many notifications as I like to the site owner.
**Screenshots**
Screenshot of email notifications

#### Potential Fix
Perhaps some sort of lock out after consecutive Likes

Contributor guide
Research direction
Start at Jetpack's Sharing Like button and follow the existing email and mobile notification flow for repeated toggles. The issue names no files or tests; define the lockout behavior and verify that consecutive Like and unlike actions no longer produce unbounded notifications.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend, frontend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100