Bitcoin Forum

Economy => Services => Topic started by: FaucetBuilder on June 22, 2015, 05:32:24 PM



Title: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 22, 2015, 05:32:24 PM
www.faucetbuilder.com (http://www.faucetbuilder.com)

Background:

I’ve been following this beautiful faucet world for some time and finally had the courage to build my own a few weeks back. I went searching for a service that would make things easy. There were a few options:

- Script services - Usually charge a fee on deposits from 3% to 10% and you need to put money in in advance
- For hire services - People who will build the faucet for you, but you have to pay up to 1btc :S
- API integration - Free and reliable but requires some technical expertise

So after some time I thought there was no ideal solution — i decided to create my own  :D

=========================================================================

So I’d like to introduce you to FaucetBuilder, a FREE FAUCET SCRIPT with the following features:

www.faucetbuilder.com (http://www.faucetbuilder.com)

- Step-by-step script with instructions how to create your faucet
- 6 languages (English, Russian, Spanish, Ukranian, Portuguese, Thai, Filipino)
- Integrates with Xapo API so your users can get paid via email or btc address
- Threshold so your users can choose when to withdraw (avoid dust payments)
- No minimum deposits for your faucet to be operational (just need money in your wallet that you use to pay users)
- Migration guide from other paid scripts (faucetbox and micro wallet)
- Did i say FREE?  :)

Why am I doing this for free?

I am always thinking about how I personally contribute to the growth of bitcoin.
I think faucets are a great way to showcase some of the best features of bitcoin — micropayments, speed, cross-border transactions, etc… — and is also a way for people to own a small bits of bitcoin without going through an exchange.

So… what do you think? I would love your feedback on how I can improve, what to change, etc…

Btw, I think I mentioned before that this is all free and I did it as a hobby. If you build your faucet with this or find it useful, please help me by donating some bits  :)


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: saimonmac on June 23, 2015, 01:32:17 PM
Finally the service I was expecting! I think faucetbox is taking too much of my money with their fees.
I will try it out and see how it works! I will let you know.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: avelina on June 23, 2015, 01:56:18 PM
I will definitely try your script.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 23, 2015, 07:13:56 PM
Thank you! Let me know what you think!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: examplens on June 23, 2015, 08:58:32 PM
Do you have any faucet demo site with this script?
any protection on IP address or etc?
 


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: alwinlinzee on June 23, 2015, 09:13:24 PM
It is good to know that this is free but I hope you will not have some adverts displayed on the faucet website?


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 23, 2015, 10:00:18 PM
It is good to know that this is free but I hope you will not have some adverts displayed on the faucet website?

For now the idea was to try and have some donations and not put ads. But no one has tipped yet  :'(
I would really prefer to not have to put ads..

I just want to see more people making faucets with my script! :)


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: melisande on June 23, 2015, 10:14:19 PM
It is good to know that this is free but I hope you will not have some adverts displayed on the faucet website?

For now the idea was to try and have some donations and not put ads. But no one has tipped yet  :'(
I would really prefer to not have to put ads..

I just want to see more people making faucets with my script! :)
Nice to offer free script, there should be a demo of how the site will look like, this will motivate people to show interest and also offer free installations and request for compulsory donations.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: examplens on June 24, 2015, 07:50:40 AM
Here is a demo http://freebtc.work  i'm added advert.
Nice script, easy for install.
OP can i ask you some question on PM? Need little help


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 24, 2015, 04:25:59 PM
It is good to know that this is free but I hope you will not have some adverts displayed on the faucet website?

For now the idea was to try and have some donations and not put ads. But no one has tipped yet  :'(
I would really prefer to not have to put ads..

I just want to see more people making faucets with my script! :)
Nice to offer free script, there should be a demo of how the site will look like, this will motivate people to show interest and also offer free installations and request for compulsory donations.

Thanks and this is good suggestion. I hope to add a few different template examples. I'm talking with a guy who has a few different faucets that he customizes from scratch. I will add some updates once it's live!

Thanks for trying it btw :)


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: dezoel on June 24, 2015, 05:13:15 PM
interesting, I'll try your script :)
just keep your great works... :D


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: meadefreling on June 24, 2015, 05:56:48 PM
It is a very nice website and I like the way you placed the adverts, it is better you sell the script because the gains in the faucet hosting is the money made from the adverts.
I am interested in buying the script.
PM me your price.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 24, 2015, 09:21:39 PM
It is a very nice website and I like the way you placed the adverts, it is better you sell the script because the gains in the faucet hosting is the money made from the adverts.
I am interested in buying the script.
PM me your price.

I prefer to have people try it and create faucets before i think of charging money. If you provide faucet name and email you can download it for free on the website.
In other words, you can buy the script for free. The price is 0.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: noel57 on June 24, 2015, 09:29:44 PM
It is a very nice website and I like the way you placed the adverts, it is better you sell the script because the gains in the faucet hosting is the money made from the adverts.
I am interested in buying the script.
PM me your price.

I prefer to have people try it and create faucets before i think of charging money. If you provide faucet name and email you can download it for free on the website.
In other words, you can buy the script for free. The price is 0.
$0 price would be nice, I can install this on my .work domain name but I will prefer the ad free script.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 25, 2015, 02:02:47 PM
It is a very nice website and I like the way you placed the adverts, it is better you sell the script because the gains in the faucet hosting is the money made from the adverts.
I am interested in buying the script.
PM me your price.

I prefer to have people try it and create faucets before i think of charging money. If you provide faucet name and email you can download it for free on the website.
In other words, you can buy the script for free. The price is 0.
$0 price would be nice, I can install this on my .work domain name but I will prefer the ad free script.

sorry im not sure i follow. you can get the script straight from the website from free and create your faucet with the instructions.
can you clarify what you need?

faucetbuilder.com


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 26, 2015, 06:17:44 PM
Do any of you guys know websites in Russia that are active in promoting bitcoin services?
I see many Russians on my site. Would love to focus there to see if I can get some traction.

Or do you have any suggestions on how to get more traction? Im thinking maybe spending some ad $ on btc ad services.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: szgal on June 30, 2015, 01:39:43 AM
DO NOT USE THIS SCRIPT!!!
EDIT: The OP has fixed the issue below and sent an e-mail to faucet owners. There are still some logic problems in that code but so far every "exploit" requires admin login. I will take a look at the fixed version.
This script has a backdoor!!!
On this page: https://github.com/destinybogan/Faucet-Builder/blob/master/admin/index.php
The code contains:

Code:
if(isset($_COOKIE['remember'])){
  $_SESSION['admin']=true;
}

This means that if I set a cookie with the name "remember", I AM THE ADMIN!
Hackers can set cookies because they are stored client-side and sent to the server in an HTTP header!

You may think that because it only shows the last four characters of your Xapo key, you are safe.
But a hacker could increase the referral payout to something insanely high, disable the timeout, take the SolveMedia key and run a bot until all the coins are gone .

So do not use this script!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: bit1 on June 30, 2015, 01:54:00 AM
DO NOT USE THIS SCRIPT!!!
This script has a backdoor!!!
On this page: https://github.com/destinybogan/Faucet-Builder/blob/master/admin/index.php
The code contains:
Code:
if(isset($_COOKIE['remember'])){
  $_SESSION['admin']=true;
}

This means that if I set a cookie with the name "remember", I AM THE ADMIN!
Hackers can set cookies because they are stored client-side and sent to the server in an HTTP header!

You may think that because it only shows the last four characters of your Xapo key, you are safe.
But a hacker could increase the referral payout to something insanely high, disable the timeout, take the SolveMedia key and run a bot until all the coins are gone.

So do not use this script!



Thanks for advice .....     Hmmm  I'm wondering now:         How many faucets does have it?


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 30, 2015, 02:16:29 AM
DO NOT USE THIS SCRIPT!!!
This script has a backdoor!!!
On this page: https://github.com/destinybogan/Faucet-Builder/blob/master/admin/index.php
The code contains:
Code:
if(isset($_COOKIE['remember'])){
  $_SESSION['admin']=true;
}

This means that if I set a cookie with the name "remember", I AM THE ADMIN!
Hackers can set cookies because they are stored client-side and sent to the server in an HTTP header!

You may think that because it only shows the last four characters of your Xapo key, you are safe.
But a hacker could increase the referral payout to something insanely high, disable the timeout, take the SolveMedia key and run a bot until all the coins are gone.

So do not use this script!



Thanks for advice .....     Hmmm  I'm wondering now:         How many faucets does have it?

I have very few faucets using.. less than 20. I will make the changes ASAP to restore this.
Thank for bringing this up


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: szgal on June 30, 2015, 02:37:37 AM
I double-checked, and in my opinion this backdoor is fully intentional.
He checks if the cookie called "remember" exists, but that cookie is not set anywhere.
This means that the script expects that a human will set that cookie manually, because manually setting it is the only way it can exist.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 30, 2015, 11:58:46 AM
OP here. The script has been fixed

All faucets that have been created via the script have been notified of the fix via email. Please PM me if you are still having questions.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: Emerge on June 30, 2015, 12:02:19 PM
If a dev can check again if there's a no more backdoor that would be great.
I like how it has a Filipino language pack though. Good luck!

Hope you don't scam anybody with this service.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 30, 2015, 07:24:49 PM
If a dev can check again if there's a no more backdoor that would be great.
I like how it has a Filipino language pack though. Good luck!

Hope you don't scam anybody with this service.

I can confirm the script has been fixed. As I mentioned in the first post this has been done as a hobby to help guys who want to create faucets for free.
It is true that the remember cookie created a vulnerability but this was stupid mistake by me. I did it initially so that the admin did not have to keep logging in. But this has been brought up and fixed.

I have tried to be as open as possible and fix issues like this ASAP. Anyone with dev background can check the fix and see that the vulnerability have been removed.

I hope you enjoy the script and thanks for trying it out!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on June 30, 2015, 07:31:34 PM
I double-checked, and in my opinion this backdoor is fully intentional.
He checks if the cookie called "remember" exists, but that cookie is not set anywhere.
This means that the script expects that a human will set that cookie manually, because manually setting it is the only way it can exist.

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: szgal on June 30, 2015, 08:30:45 PM
I double-checked, and in my opinion this backdoor is fully intentional.
...strip...

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.

I can confirm that the "remember" cookie bug is fixed. Thank you for acting so fast. I thought it's intentional because in the initial commit (https://github.com/destinybogan/Faucet-Builder/commit/49e11c91812d020b677fe791faffb06e27da706c), there's no setcookie("remember"). This means you either wanted to write some code that sets the cookie but then forgot about it, or you backdoored the script and put a "remember me" checkbox to make it less suspicious. Sorry for accusing you if the former is the case.

By the way, this script still has a security vulnerability which allows full write access to the database for everyone who can log in as admin.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: bit1 on June 30, 2015, 11:32:39 PM
I double-checked, and in my opinion this backdoor is fully intentional.
...strip...

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.

I can confirm that the "remember" cookie bug is fixed. Thank you for acting so fast. I thought it's intentional because in the initial commit (https://github.com/destinybogan/Faucet-Builder/commit/49e11c91812d020b677fe791faffb06e27da706c), there's no setcookie("remember"). This means you either wanted to write some code that sets the cookie but then forgot about it, or you backdoored the script and put a "remember me" checkbox to make it less suspicious. Sorry for accusing you if the former is the case.

By the way, this script still has a security vulnerability which allows full write access to the database for everyone who can log in as admin.

Excellent, Is really  good see peoples interested on security,I hope that more peoples join soon to this cause....


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: dezoel on July 01, 2015, 10:16:38 AM
I double-checked, and in my opinion this backdoor is fully intentional.
He checks if the cookie called "remember" exists, but that cookie is not set anywhere.
This means that the script expects that a human will set that cookie manually, because manually setting it is the only way it can exist.

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.

Thanks, i've updated my faucet script!
really, you're awesome! ;D


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on July 01, 2015, 12:24:28 PM
I double-checked, and in my opinion this backdoor is fully intentional.
...strip...

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.

I can confirm that the "remember" cookie bug is fixed. Thank you for acting so fast. I thought it's intentional because in the initial commit (https://github.com/destinybogan/Faucet-Builder/commit/49e11c91812d020b677fe791faffb06e27da706c), there's no setcookie("remember"). This means you either wanted to write some code that sets the cookie but then forgot about it, or you backdoored the script and put a "remember me" checkbox to make it less suspicious. Sorry for accusing you if the former is the case.

By the way, this script still has a security vulnerability which allows full write access to the database for everyone who can log in as admin.

I appreciate the feedback and making note of these things. As I said I am doing my best (with the resources I have) to make a good and honest business. I will continue to update these things as fast as I can and am on to the extra database issue you mentioned.

Cheers dezoel!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: dHe_zHiq on July 01, 2015, 01:25:51 PM
Wow, nice script ;D i like the feature, and %0 fee  :o thank you for spending your time


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on July 01, 2015, 06:51:11 PM
Wow, nice script ;D i like the feature, and %0 fee  :o thank you for spending your time

My pleasure! Glad you liked it!
Let me know if you have suggestions on what you'd like added :)


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on July 09, 2015, 02:56:59 AM
Hello friends,

Faucetbuilder has received some updates:

-More sanitizing on SQL queries.
-Improvement on table creation script to be able to execute it with the
new created users.
-Security tips improved

The guys who have downloaded the script will have received an email with these updates. Let me know what you think!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: meadefreling on July 14, 2015, 09:23:57 AM
This is no doubt one of the best faucet script out there after the fixing of the bug however I am not interested in using xapo for my faucet account is there any way to integrate any other payment gateway.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on July 15, 2015, 06:02:02 PM
This is no doubt one of the best faucet script out there after the fixing of the bug however I am not interested in using xapo for my faucet account is there any way to integrate any other payment gateway.

Thanks for the nice words. I'm working hard on this (when i have time) :)

If you dont want to use Xapo what other option would you like to see? The reason I chose Xapo is because they are very well known in the faucet world especially non-English places. They seem to have the APIs we'd need to do this, allow to pay to email or btc address, and they cover all your miner fees so you dont need to pay for that. Am i missing something?

If you have a better option I can look but so far most of the guys using my script are happy with them.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: Bandot on July 25, 2015, 07:47:30 PM
Nice looking service. Might use it in the future. Keep up the good work OP!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on July 27, 2015, 03:53:34 PM
Thanks! Appreciate the feedback!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on August 12, 2015, 03:59:42 PM
Thanks! Appreciate the feedback!

We have made new updates to our script to improve security. If you have a second please check it out and let us know your thoughts!


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: kori on August 12, 2015, 05:58:37 PM
Is this better that faucetbox.com
Plz tell i want to make a faucet
On my dimain Abitcoin.net
And i am out of funds too.
Plz tell if this script is better than faucet box or not
Regards


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on August 13, 2015, 04:27:51 AM
Is this better that faucetbox.com
Plz tell i want to make a faucet
On my dimain Abitcoin.net
And i am out of funds too.
Plz tell if this script is better than faucet box or not
Regards


Yes it's like faucetbox but better. You can pay to email or btc address and if users use Xapo (which I've seen many of the bigger faucets using) they are paid automatically even if it's 1 satoshi. The best part is that we are free. We dont charge anything for you to use this service, I believe Faucetbox charges 3% of all your funds.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: Specialist on August 13, 2015, 08:50:50 AM
Wow what a nice Intention from FaucetBuilder. I am still at work so I coudn`t test your skript till now but I can`t wait to do so when I am back home. I´ve been looking for something like this the last weeks. Things like your free skript really help the new guys round here. And another big thx to szgal for pointing out the potential backdoor in the skript and sharing it with the community instead of collecting all the satoshis with this little dirty trick  ;). Guys like you make me feel really comfortable in this Forum.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on August 13, 2015, 03:13:29 PM
Wow what a nice Intention from FaucetBuilder. I am still at work so I coudn`t test your skript till now but I can`t wait to do so when I am back home. I´ve been looking for something like this the last weeks. Things like your free skript really help the new guys round here. And another big thx to szgal for pointing out the potential backdoor in the skript and sharing it with the community instead of collecting all the satoshis with this little dirty trick  ;). Guys like you make me feel really comfortable in this Forum.

First of all definitely agree on our good guy /u/szgal. You da real MVP!

Second, if you test it and like please help us by sharing it! So far I have only really promoted it on bitcointalk and to a few friends building faucets.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: Slark on August 13, 2015, 03:20:34 PM
Ok Guys, I read some disturbing posts about security in this thread and I want to ask final question: is this script legit and free of any malicious code?
I can use it freely without worrying about backdoor or other scammy shit in it? There are no exploits anymore, or you guys just don't find any?


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: alva5763 on August 13, 2015, 04:21:44 PM
I have bookmarked the link but will await developments before actually trying to use it.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: FaucetBuilder on August 13, 2015, 08:09:02 PM
Ok Guys, I read some disturbing posts about security in this thread and I want to ask final question: is this script legit and free of any malicious code?
I can use it freely without worrying about backdoor or other scammy shit in it? There are no exploits anymore, or you guys just don't find any?

We have fixed the backdoor issues and are constantly stress testing it to check for any other issues. The most updated script can be downloaded from the website (the one with all the fixes).


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: alwinlinzee on August 26, 2015, 11:46:37 AM
Ok Guys, I read some disturbing posts about security in this thread and I want to ask final question: is this script legit and free of any malicious code?
I can use it freely without worrying about backdoor or other scammy shit in it? There are no exploits anymore, or you guys just don't find any?

We have fixed the backdoor issues and are constantly stress testing it to check for any other issues. The most updated script can be downloaded from the website (the one with all the fixes).
Nice to know that the backdoors are fixed for this script, thanks to the wonderful support from OP not minding that it is a free script but still try his best to make it worthwhile.


Title: Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
Post by: Kingno.1 on August 26, 2015, 02:34:53 PM
Can you please help me what i have to do to start a new faucet , i am totally new and don't know about technically,