Bitcoin Forum

Bitcoin => Project Development => Topic started by: odditie on December 20, 2014, 08:46:06 AM



Title: need some advice regarding my bitcoin faucet
Post by: odditie on December 20, 2014, 08:46:06 AM
Hi All,

I have created a faucet as a personal project mainly to test out my php knowledge and help me learn more. I am however stuck at one point and would appreciate some advice. Everytime a user requests funds from the faucet I check that the BitcoinAddress and the IP have not been used in the last 24 Hours, However if someone were to use a proxy and a different address I have no way to check this. so someone to keep doing this every time they change IP if they wanted.

I do have CAPTCHA on my site so this will stop the use of scripts but i'm wondering if anyone has any bright ideas on how I could check?

I have looked into the possibilities of getting hardware ID or something like network mac address, CPU ID, HDD ID etc but I dont see a way of getting this.

Thanks for any help you may provide.

Regards,

odditie


Title: Re: need some advice regarding my bitcoin faucet
Post by: Martijnvdc on December 20, 2014, 01:04:21 PM
mac addresses can be changed.

You could make it harder by using a username and password, and requiring people to register via email. That wouldn't solve your problem, but it would help make it not worth their time.
You could also block known TOR exit nodes.


Title: Re: need some advice regarding my bitcoin faucet
Post by: hexafraction on December 20, 2014, 02:16:48 PM
I have looked into the possibilities of getting hardware ID or something like network mac address, CPU ID, HDD ID etc but I dont see a way of getting this.

None of these are possible to obtain over a network (MAC address is only transmitted on layer 2), and the rest require a plugin that users aren't bound to trust.


Title: Re: need some advice regarding my bitcoin faucet
Post by: jokerboy on December 21, 2014, 04:21:54 PM
use cookies


Title: Re: need some advice regarding my bitcoin faucet
Post by: Kprawn on December 21, 2014, 06:58:01 PM
use cookies

cookies can be disabled  ;D


Title: Re: need some advice regarding my bitcoin faucet
Post by: sherbyspark on December 21, 2014, 07:53:08 PM
Hi All,

I have created a faucet as a personal project mainly to test out my php knowledge and help me learn more. I am however stuck at one point and would appreciate some advice. Everytime a user requests funds from the faucet I check that the BitcoinAddress and the IP have not been used in the last 24 Hours, However if someone were to use a proxy and a different address I have no way to check this. so someone to keep doing this every time they change IP if they wanted.

I do have CAPTCHA on my site so this will stop the use of scripts but i'm wondering if anyone has any bright ideas on how I could check?

I have looked into the possibilities of getting hardware ID or something like network mac address, CPU ID, HDD ID etc but I dont see a way of getting this.

Thanks for any help you may provide.

Regards,

odditie
If the faucet is giving out like 500-1000 satoshis, then people repeatedly changing browsers or TOR, would give up soon as it wont be profitable for them over time.
So it should be fine to continue with the current method of just having CAPTCHAS.


Title: Re: need some advice regarding my bitcoin faucet
Post by: 548845 on December 21, 2014, 07:55:51 PM
mac addresses can be changed.

You could make it harder by using a username and password, and requiring people to register via email. That wouldn't solve your problem, but it would help make it not worth their time.
You could also block known TOR exit nodes.

^^^ This.

There is also a websites that provides you with a txt file for all known proxies so that you can use.
This is one: http://proxylist.hidemyass.com/ (http://proxylist.hidemyass.com/)

So basically block proxies.