Hi,
Has Faucetbox the LifeTime Referral and Sign UP by E-mail features?
The FaucetBox script has the ability for lifetime referrals, but e-mail signup would have to be custom coded in. Maybe I'm being an idiot but I can't see the timelife referral option in the faucetbox admin panel. I'm sorry but where is it? What do you mean by lifetime referral exactly? Is the "hide" feature on the faucet list new, or has it always been there? I just noticed it today and I'm not sure if it's a new feature or I'm just unobservant.
It's new, released yesterday. |
|
|
|
I am getting nothing but a white screen on the statistics page ( https://faucetbox.com/en/stats). OP, are you playing with it? EDIT: It now shows "This page is temporarily disabled, sorry." So I guess you are working on it. Fixed now. |
|
|
|
Now the interesting things happen.
i make two faucets, one for btc and one ltc. After an hour, one faucet have a this problem again, but other works without any problems. exactly the same settings on both
i guess that is nastyhosts make a problem
What IP is reported when you set $display_errors = true;? Is it the same as on http://api.ipify.org/ or is it different? If it's different then again you have a problem with reverse proxy. If it's the same, please send it to the support and we'll try to resolve it. |
|
|
|
does anyone have an idea why ihave blank white page when i click on reward claim?
no error message, nothing, just blank page.
i try to install new r61 version, nut again this problem. everything is fine, edit the claim rewards, timer, API key, captcha keys, all of this thing i can to save, but after that in same faucet, and admin page have a blank page? any idea where is a problem?
on same hosting there are other FB faucets on different domains, and all work good. exclude the possibility that the software on the server not good.
thanks
I habe also face this problem but in that case it was due to dad server means free hosting. it is not a free hosting, i have fb script already installed on this server. on this domain normally works faucetbox doge script I think I've just replied to you on support. It's a problem with combination of enabling IP address banning and using reverse proxy without configuring it properly. Reverse proxy wasn't configured in the script, so it seems like all requests came from the proxy. The script assumes that requests from proxy can't be trusted, so it refuses to handle them. That somewhat protects from password-guessing attacks on the admin panel. If anyone has a similar problem (you can check that by setting $display_errors = true; in your config.php file), you can use this script to reset your faucet's Security settings: https://static.faucetinabox.com/download/tools/clear-security.php |
|
|
|
Already left the r61  , but I see this error in the error_log, what? PHP Notice: Undefined variable: fake_address_input_used in /index.php on line 2336
Same here. It's has something to do with the hidden honeypot fields. Oops, sorry about that. It doesn't break anything except for cluttering logs. We will fix it in r62. |
|
|
|
But it is the first time that I put it, and I put an hour to cron
Please don't top-post, it's confusing . If you had a code with file(' https://www.dan.me.uk/torlist/'); in your index.php right before you created tor.php, then it already used the limit of 1 request per 30 minutes. Wait till your cron runs again and see if it's correct then. If it's not, then - as you're probably on a shared hosting - someone else on your server is also requesting this list. Then there's nothing you can do about that without changing hosting. What I can suggest in that case is either using Nastyhosts.com or the official list from Tor Project. |
|
|
|
He left me this message in the file Umm... You can only fetch the data every 30 minutes - sorry. It's pointless any faster as I only update every 30 minutes anyway.
If you keep trying to download this list too often, you may get blocked from accessing it completely.
(this is due to some people trying to download this list every minute!)
You can't run tor.php more than once every 30 minutes. |
|
|
|
Can i do this to block tor ips? By going to https://www.dan.me.uk/torlist/, can I copy and paste these IPs into my IP blacklist in the security tab on my faucetinabox admin page? Or do I have to do something more? If you're planning to do this, I would suggest having your code do it automatically to save you trouble and increase security. To do this, I believe that you can just input this code at line 1512: foreach(file('https://www.dan.me.uk/torlist/') as $torIP){
if(ipSubnetCheck($ip, $torIP)){
banned();
}
}
If this is incorrect, please correct me Kazul; I'm having trouble understanding the code lol. will return the tor list once every 30 minutes. To be honest I'm not sure if using this list is a good idea at all. It lists all Tor nodes, including relay nodes, not only exit nodes. In practice you'll only see exit-nodes on your faucet, so I think it's better to use the official list: https://check.torproject.org/exit-addressesEDIT: also Nastyhosts.com uses https://check.torproject.org/exit-addresses as one of sources, so you can just use it to block Tor. |
|
|
|
Can i do this to block tor ips? By going to https://www.dan.me.uk/torlist/, can I copy and paste these IPs into my IP blacklist in the security tab on my faucetinabox admin page? Or do I have to do something more? If you're planning to do this, I would suggest having your code do it automatically to save you trouble and increase security. To do this, I believe that you can just input this code at line 1512: foreach(file('https://www.dan.me.uk/torlist/') as $torIP){
if(ipSubnetCheck($ip, $torIP)){
banned();
}
}
If this is incorrect, please correct me Kazul; I'm having trouble understanding the code lol. That's close, but this list provides IP addresses, not networks. So it should be something more like this (I didn't test it though): foreach(file('https://www.dan.me.uk/torlist/') as $torIP){
if(getIP() == trim($torIP)){
banned();
}
}
what determines the order of the faucetlist? I pay more and have been running longer than some of these new faucets which are popping up above me.
Likes and dislikes only. |
|
|
|
Hi...
I'm trying to change the Faucetbox code to give different reward according to the country.
Where is the code that define/set de reward to be paid? I want to put some IFs/Switches/Cases there.
Thank you.
I think your best bet is changing $data['rewards'] right before line 2156 (if you're using r60) in main index.php. |
|
|
|
Hi Kazuldur, I am a faucet owner. I want to suggest about a new feature. In a page "payouts in last 14 days". Can you show what is the current ip address of that btc address which recive payout from our faucet.I think this will hepl us to get better monitor on our user.
No, as we don't have that information and don't want to have it for users privacy. Is it possible to make separate accounts (BTC addresses) for every faucet - optionally?
(The one way to stop bots till moment to put some new blockade is just don't fill them up. But if i have two and only one is attacked i can not fill both of them.. if you know what i mean..)
That's possible only by creating multiple accounts on FaucetBOX.com. Can i do this to block tor ips? By going to https://www.dan.me.uk/torlist/, can I copy and paste these IPs into my IP blacklist in the security tab on my faucetinabox admin page? Or do I have to do something more? Edit: I tried to tor myself.. It worked and I got redirected somewhere else. Can i choose where to redirect these pesky tor users to like a page that has 10 ads as the only thing in it? Remember to update it every few days, as tor exit nodes change often. You have to change the script itself if you want to change where they're redirected. In r60 that's a function "banned()", lines 1435-1439 of main index.php file. Replacing the "http_response_code(500);" with "header("Location: http://your-page-with-ads.com");" should work. |
|
|
|
Thanks I have a pending transaction and message on blockchain : Transaction rejected by our node. Reason: The Maximum number of outputs in a single transaction is 200
MultibitClassic say: This transaction is not standard and should not be trusted
The first time I see this, what is it exactly?
All our Bitcoin transactions have 300-500 outputs, Blockchain.net always shows it only after it has been confirmed. I know nothing about MultibitClassic, but this transactions is standard. Just wait a few hours until it gets confirmed. |
|
|
|
Yes thank you, all of this today, and in the index.php also Hello, sorry to bother you but I am getting these errors in faucetbox.php every day and don't know what to do, thanks greetings [15-Oct-2015 11:37:47 America/New_York] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /libs/faucetbox.php on line 108
[15-Oct-2015 11:37:47 America/New_York] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /libs/faucetbox.php on line 152
How often do you see them? I think they may happen if there's a problem with a connection, which can happen on occasions. We will fix it in r61 |
|
|
|
Hello, sorry to bother you but I am getting these errors in faucetbox.php every day and don't know what to do, thanks greetings [15-Oct-2015 11:37:47 America/New_York] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /libs/faucetbox.php on line 108
[15-Oct-2015 11:37:47 America/New_York] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /libs/faucetbox.php on line 152
How often do you see them? I think they may happen if there's a problem with a connection, which can happen on occasions. |
|
|
|
Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /index.php:1) in /index.php on line 39
Warning: Cannot modify header information - headers already sent by (output started at /index.php:1) in /index.php on line 40
this error in version r60
Did you modify the main index.php file in any way? Even opening it and saving it without changes counts, some text editors break PHP files by saving it as UTF8 with BOM. Make sure there are no characters (not even a space or an empty line) before "<?" at the beginning of index.php file. If that doesn't help, download a fresh version and replace only that file. |
|
|
|
I have some of the most advanced anti-bot features around (and unlike most of these idiotic admins, my users don't realize).
1. Random sha-256 has dynamic field and button names (login, cashout, claim, etc)
2. Honeytrap forms with a 'three strikes and you're out' automatic banning system
Same in Faucet in a BOX script, if anyone is curious. It doesn't work very well, recent bots can bypass it (just like I predicted a month ago). The only difference is that the honeytraps reports IP addresses for manual verification, that way we can ban whole networks. 4. Email verification
Honest question: how does it work and why it haven't stopped the attack? 5. Admin verification for large cashouts (just implemented)
Add http://nastyhosts.com/ or http://getipintel.net/ or something similar to your list of countermeasures. Also use CloudFlare with Browser integrity enabled. It's not perfect, but it'll help a lot. Kazuldur also knows the main referral/wallet addresses of a large, Russian botting network that is plaguing HUNDREDS of faucet users - I have told him these on past occasions, and warn any admins who contact me to be aware of them. Has he done anything to prevent the abuse of the sites that the network in question attacks, despite being aware of the precise referral tree? Nope.
I believe we've done a lot by implementing many new anti-bot features to our script. Banning or deleting bot addresses doesn't help, they just create new ones. It has to be done on the script level and has to be based on things like IP network and trying to test the browser. You write a lot, but you've skipped my question for the second time now. What else you want us to do except for reverting payments or banning addresses, which were discussed a lot before? Also I hope that bots problem is almost solved for people using Faucet in a BOX script. I haven't got any reports of bots attack on faucets using our script in version r59 or newer (if there was an attack that wasn't reported, please tell me). |
|
|
|
I will continue to campaign for the correct features and functions to be added until you do something to protect admins like myself.
What features do you mean? Reverting payments isn't an option, come on, that's ludicrous. All other anti-bot features have to be implemented in the faucet script, not in FaucetBOX.com service. |
|
|
|
|
No way we'll implement reversing payments by owners, that would be abused over and over again.
Banning addresses is a feature that can be implemented in your faucet script if you want (Faucet in a BOX script supports that), but frankly it's pointless. Bots can create new addresses instantly and for free. What could be useful is banning IP addresses. If they're from single network, then it makes sense to ban it. Check your logs and check if there's any pattern in IP addresses. If there is, please send it to me and I'll work on adding it to Nastyhosts.com.
Also FaucetBOX.com won't reverse these payments. There's no way to tell which ones are legit and which ones are not. Heck, it's possible that these aren't even bots at all, but you just got promoted on some rotator. It's not possible to tell the difference from our point of view and we're here to protect interests of users and owners equally.
Do you use any measures to block bots except for captcha?
|
|
|
|
To everyone: I highly suggest banning 77.222.228.168 IP address. http://b1tc0in.tk/ is running on it. |
|
|
|
|
Show Posts
