It's a simple post request. All you need is to send the auth, csrf and session cookies to the reaction URL. I think XF has a rate limit of a couple of seconds but I can't be bothered to figure it out.
<forum url>/posts/<post id>/react?reaction_id=<reaction id>
But lets say if someone theoretically did this here are the IDs of all the negrates
Name | ID |
Dislike | 14 |
Deviant | 27 |
Islamic Content | 30 |
TMI | 29 |
Dumb | 17 |
Late | 11 |
Mad at the Internet | 16 |
So someone could theoretically make a script which theoretically parses the page to negrate certain users's posts (the posts are contained in an article tag and in the article tag there's a data-content attribute containing the post ID formatted like
post-<post ID>
and a data-author attribute containing the author's username) and then theoretically send a HTTP request to the url I mentioned above with their auth, session and CSRF cookie and therefore adding a negative reating to this user's post.
I am not at all encouraging anyone to do this.