Vote Return URL Guide

// Node.js example
const crypto = require('crypto');

// Get these from the URL parameters
const server_id = req.query.server_id;
const vote_id = req.query.vote_id;
const timestamp = req.query.timestamp;
const ip = req.query.ip;
const receivedSignature = req.query.signature;

// Verification string should match exactly what our system uses
const verificationString = `${server_id}|${timestamp}|${ip}`;

// HMAC secret key - same as used by our system
const secretKey = 'toplistVoteVerify2025';

// Generate signature for comparison
const calculatedSignature = crypto
  .createHmac('sha256', secretKey)
  .update(verificationString)
  .digest('hex');

// Compare signatures to verify authenticity
if (calculatedSignature === receivedSignature) {
  // Signature is valid, vote is authentic
  // You can now reward the player
  console.log('Vote verified successfully!');
} else {
  // Invalid signature, possible tampering attempt
  console.log('Vote verification failed!');
}
                                

// Java example
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.util.HexFormat;

// Get these from the request parameters
String serverId = request.getParameter("server_id");
String voteId = request.getParameter("vote_id");
String timestamp = request.getParameter("timestamp");
String ip = request.getParameter("ip");
String receivedSignature = request.getParameter("signature");

// Verification string should match exactly what our system uses
String verificationString = serverId + "|" + timestamp + "|" + ip;

// HMAC secret key - same as used by our system
String secretKey = "toplistVoteVerify2025";

try {
    // Create MAC with SHA256 algorithm
    Mac hmacSHA256 = Mac.getInstance("HmacSHA256");
    SecretKeySpec secretKeySpec = new SecretKeySpec(
        secretKey.getBytes(StandardCharsets.UTF_8), 
        "HmacSHA256"
    );
    hmacSHA256.init(secretKeySpec);
    
    // Generate signature
    byte[] calculatedSignatureBytes = hmacSHA256.doFinal(
        verificationString.getBytes(StandardCharsets.UTF_8)
    );
    
    // Convert bytes to hex string
    StringBuilder sb = new StringBuilder();
    for (byte b : calculatedSignatureBytes) {
        sb.append(String.format("%02x", b));
    }
    String calculatedSignature = sb.toString();
    
    // Compare signatures
    if (calculatedSignature.equals(receivedSignature)) {
        // Signature is valid, vote is authentic
        // You can now reward the player
        System.out.println("Vote verified successfully!");
    } else {
        // Invalid signature, possible tampering attempt
        System.out.println("Vote verification failed!");
    }
} catch (Exception e) {
    e.printStackTrace();
}