Bitcoin Forum

Economy => Micro Earnings => Topic started by: tungaqhd on December 06, 2017, 06:38:42 AM



Title: Closed
Post by: tungaqhd on December 06, 2017, 06:38:42 AM
Closed


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: coin_curious on December 06, 2017, 01:48:23 PM
how do they steal api key?

do they read or download config file?





Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: tungaqhd on December 06, 2017, 02:01:54 PM
how do they steal api key?

do they read or download config file?




I just guess, because i can't find their address in my database. It could be local attack or  ??? ??? ???


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: adi016 on December 06, 2017, 02:28:46 PM
how do they steal api key?

do they read or download config file?




I just guess, because i can't find their address in my database. It could be local attack or  ??? ??? ???

I think there is some problem in script because one more user asked me that he also facing same issue.. His faucet is draining continuously


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: taiem1407 on December 06, 2017, 02:47:04 PM
thanks for the warning. Site is no longer secure.


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: coin_curious on December 06, 2017, 03:08:05 PM
I have added .htaccess restriction to config.php, faucethub.php and function.php. allowed only server ip access.

then made new database user/pw/name.
regenerated api and changed it all. now only faucet has access to those files.


I hope this will restict and prevent stealing those access codes/api and sending info to thos files.


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: adi016 on December 06, 2017, 03:36:22 PM
I have added .htaccess restriction to config.php, faucethub.php and function.php. allowed only server ip access.

then made new database user/pw/name.
regenerated api and changed it all. now only faucet has access to those files.


I hope this will restict and prevent stealing those access codes/api and sending info to thos files.

That's good, but if you see any problem then Change your faucet script


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: coin_curious on December 06, 2017, 03:44:55 PM
I have added .htaccess restriction to config.php, faucethub.php and function.php. allowed only server ip access.

then made new database user/pw/name.
regenerated api and changed it all. now only faucet has access to those files.


I hope this will restict and prevent stealing those access codes/api and sending info to thos files.

That's good, but if you see any problem then Change your faucet script

my problem is that every faucet script ive used got botted eventualy. I think ive used 4 diffrent ones by now.

I like how it all works now and just want it more secure. I do get less claims in already now.

Now i like to find out if i close port 3306 for MySQL database will be even better. but just havent figured that out yet.


Title: Re: Warning: Stop using CoinBox Faucet Script
Post by: tungaqhd on December 06, 2017, 03:49:01 PM
I have many ideas with this script if it hasn't got hacked. :-\ :-\ :-\ LOL hope someone can help me fix it now.