How would you do it?
It is that I have the full IPS htaccess
Personally I would keep on checks like NastyHosts and keep the minority of real people that are blacklisted wouldn't be able to access the faucet. I cannot imagine there being a safe way to prove that you are an owner of a real IP for whitelisting, and not just a bot owner asking for his bot to be unblocked. However, I am not a faucet owner and I'm only speaking from what I have read and my own judgement. You would be better perhaps asking other owners of major faucets how they keep away bots and such. No problem. You were just trying to help. Both of us learn with these tests.  Thank you for being understanding. |
|
|
|
Problem campaigns and their operators like yobit and secondstrade should also be banned
The problem with this I imagine is, since they are using a bot, they have little need for an account here. They could still view the forum and add people to the campaign without an account and could communicate any updates via email or on-site messaging, since I believe they use accounts on their site for payment (rather than personal BTC addresses). and/or have their signatures forecably blocked if they cannot deal with their campaigns effectively or maybe a button to remove certain users signature would be a good idea to manually remove them.
This is the only thing I can really imagine working well against them. If the forum no longer allows them to show their ads, they would have to comply with the rules or not show ads here. |
|
|
|
That is the bad thing, apparently Nastyhost can block legitimate ips.
Is there no way to use the Tor ip only?
I expect that it is a very low chance of doing so. You can use the Tor test without NastyHosts by not turning it on, as the Tor checker runs separately. I wouldn't advise it though, as your faucet would be less secure. |
|
|
|
I am talking about this code: if(strpos('abcdefghijklmnopqrstuvwxyz', 'hello') !== false){
//executable code
}It isn't returning true as you suggested. Th code inside the if does't execute. In that case, I may have made a mistake and mixed it up with another function. My apologies. E: Yes, I am incorrect about strpos. My greatest apologies. |
|
|
|
Hello elbandi I still get blank screen after doing what you told me to, but this time I get this error: Fatal error: Uncaught exception 'Exception' with message 'GMP extension seems not to be installed' in C:\xampp\htdocs\mini\BlockIo\lib\block_io.php:10 Stack trace: #0 C:\xampp\htdocs\mini\core.php(23): require_once() #1 C:\xampp\htdocs\mini\index.php(3): require('C:\\xampp\\htdocs...') #2 {main} thrown in C:\xampp\htdocs\mini\BlockIo\lib\block_io.php on line 10From this, it seems that your hosting doesn't have the GMP extension installed for the block.io wallet API, as is listed as one of the requirements on their documentation. Try installing this or using a hosting with it pre-installed and see what happens. If not, just comment it out like previously if you're not using it. |
|
|
|
Yes, that I know it, but from the Faucetina panel must enable Nastyhost so both are running?
Yeah, you should definitely have NastyHosts on in the FaucetInABox admin panel. Apologies, I seem to have misunderstood you. |
|
|
|
Well...
I just created a php file with you example above and installed it into my host.
A did run the php file and it doesn't execute the code inside the if.
Are you sure that your example returns true?
Almost none of my codes posted here are tested and are just from the top of my head. They should be used as a guideline if nothing else. Which part of the If are you talking about? The one in the foreach loop? Could you do a var_dump of the IP given by the explode+str_replace method and some of the TOR ips the foreach loop returns? |
|
|
|
Never mind I got it working, by deleting Blocklo folder (I won't be using it) and then commented out: require_once 'BlockIo/lib/block_io.php'; in core.php (line 23) You could probably just comment out that line. If it doesn't have the require_once request then it won't use the folder anyway. Do you test it after this modify on live server?
I don't see why it wouldn't work as long as you aren't using the block.io API to send payments. |
|
|
|
I'm using the strpos because I'm printing more than just the IP per line. I use a tag to identify what layer of my agorithm blocked the IP.
It is something like this: LAYER1 - BLOECKED_IP\n
Then.. strpos is working well for me in this format.
I can understand what you mean, and if it works well for you then there is little point to change it. However, I was just pointing out that strpos can return incorrect strings under certain circumstances. If you're not too worried about a fairly small amount of real users not being able to access your site there is no need to change your code. If you really wanted to change it though, you could probably just use explode and str_replace to get the IP alone. Something like this: $explodedStr = explode(' ', 'LAYER1 - BLOECKED_IP\n');
$finalIP = str_replace("\n", '', $explodedStr);
Obviously it will probably need some tinkering as in my experience these sorts of things never tend to work first time, though you could probably hack around it if you needed to. |
|
|
|
Friend... you can do this way: This seems like a much better way to do it in fact. Though, there are a few modifications I would like to make. Firstly, the Server IP doesn't have to be inputted manually, and it maybe a pain if the server's IP is dynamic. You can probably just use $_SERVER['SERVER_ADDR']; as a replacement. Secondly, AFAIK strpos is a really bad way to detect other IPs as it could return false positives. For example, if this is executed: if(strpos('abcdefghijklmnopqrstuvwxyz', 'hello') !== false){
//executable code
}
It will run the code inside as the characters in the string 'hello' are within the alphabet, regardless of the order. A better way to go about searching the list would be to turn it into an array and use a foreach loop. You can probably go about doing this by using code similar to this: foreach(explode("\n", $torList) as $torIP){
if($torIP == $ip){
banned();
}
}
This code splits the list by every new line and cycles through it, trying to match every IP in the list with the current user's IP. If it finds a match, it bans the user. |
|
|
|
|
There must be some sort of measures which can be taken against campaigns with a blatant disregard for the forums. Perhaps banning the signature and campaign overall? There must be a way to wipe users' signatures.
First though, I believe that people who make insubstantial posts like this should be temp banned and told about their mistake.
|
|
|
|
The point raised by Amph ' is quite true ,Why would I rent my signature to anyone ? it can have many adverse effects ,
you dont rent your signature to a scammer ? you dont rent your signature to your competing businesses ? unless you are getting some percent or some share from the company. Same goes for Referral commissions ,why are you promoting them ? To get your share.
Yes, to get my share. If I had a service worth advertising here, I would likely do so. In the mean time, if people will pay me to advertise them why wouldn't I? Mini ' is not genuine as he is seeking rewards for help he is providing and that can be considered as a job.
all are in the same category just different sub-sections.
I don't appreciate that comment. If I were only posting for the reward, why would I bother trying to make long, useful high quality posts instead of 1-2 sentence posts similar to Amph and other users. I would get paid the same, if not more for less effort. Do you think I deserve no reward for any of those posts? Either way, I'm done posting here as per the suggestion of several other users to stop clogging the thread. If you would like to discuss this further send me a PM or start a new topic in Meta. |
|
|
|
OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?
The Tor list and NastyHosts are two seperate services. The Tor list stops Tor only stops Tor, whereas NastyHosts stops malicious hostnames and other things. |
|
|
|
I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.
The Tor list and NastyHosts both achieve different purposes. You should have both. Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces. |
|
|
|
my question was actually, why you're enrolled, if you can post many post without the signature, not how many post you will do anyway without it...
there is a big difference..
I post here to help people out with code and because Bitcoin interests me. I do not get paid for the coding that I do for other people, so I consider a signature campaign to be the best way to do so.
I answered your question in my post. Next please. |
|
|
|
but like i've said it is obvious that if someone is carrying a signature, he do it for the money, otherwise everyone is lying here, because he would post without the signature... why all you guys are enrolling then?
I have a combined post count of probably ~4k+ posts in different forums around the internet, around 3k of those completely unpaid (as they weren't here). I post here to help people out with code and because Bitcoin interests me. I do not get paid for the coding that I do for other people, so I consider a signature campaign to be the best way to do so. If signature campaigns were abolished, my posting habits wouldn't change too much; I post on forums and topics that interest me, not that pay me. |
|
|
|
why is there a problem when he is not banned even after getting noticed ? looks something personal.
Because Amph openly only posts for the signature earnings. Marco said that anyone that only posts for the earnings will be removed from the campaign. Try reading the thread. Really though, as happy as I'm sure it would make several members on the forum, I really doubt Amph will get kicked from the campaign. I would like to be proven wrong though. |
|
|
|
How do you withdraw? I collected a balance of over 10000 using bitcoin faucets, but there's no withdrawal button anywhere!  Withdrawals happen automatically every few days. Be patient and you will get your coins. |
|
|
|
i don't wanna argue first of all.
I don't very often argue, more debate. I only argue when I insult someone, which I don't intend to do often here. My apologies if you feel like I did. the media of advertisement in this site is being monopolized by gambling
Because they are the ones that can pay for it. Until another service comes along that can pay more/match, there won't be another type of ad. are there anything more innovative in the advertisement as we can see?
Gambling sites very often to things such as Giveaways on their sites, which is a good way to get people into using them. Sometimes people do still need reminding of said sites to continue visiting though. |
|
|
|
but would you feel annoyed with those gambling ads if they were throughout the months and even years?
No, why would I? I have no interest in Gambling for them to perhaps try and tease me in. A gambling site is a business. Businesses need people using them for them to prosper. Whether you like it or not, the only way to get people to use your service is to tell them about it through advertising. It would be unfair to stop that simply because of the type of site they are, especially since the site is completely law abiding. Also, hate to break it to you buddy, but a site in your signature is a gambling site. If you're so against it, maybe you should remove that first. you may ignore it, but it is brain washing.
Yeah man, the general public is being brainwashed by gambling adverts on a bitcoin forum. Now, where did I put my tinfoil hat again? |
|
|
|
|
Show Posts
