votekey registration is racy
kusma opened this issue · comments
In include_register.php, the votekey is checked once, and then the user gets created and the votekey updated. This can allow a votekey to be double-spent, creating multiple users per votekey.