That's a known issue and we did block the popups and redirection deliberately. It prevents faucets from opening annoying popups and redirecting out from the rotator. We even give a warning to faucet users about that when they're adding their faucets to the rotator.

What we plan to do is adding a button for user like "Open this faucet in new window". Such window wouldn't be sandboxed then.

6-8 hours after first successful payout.

This hack usually results in many small-to-moderate payouts to many addresses in time smaller than the timer. I guess it could be a result of SQL Injection, but why bother with something like that then? SQL Injection probably allows to just steal the API key from the database and I think that would be much easier.

3% fee is for the network fees (and we're constantly lowering it as we manage to cut the network fees down). We get nothing from it, we live on ads.


If you are allowed to redistribute it, send me a link to it on PM. But as I said, no guarantees and I won't find time for it in next couple days, so keep looking for someone who maybe will be able to fix that sooner.

And once again: why do you think it's a SQL Injection vulnerability? If you're correct than finding and fixing it should be fairly easy.

It doesn't look at all like a SQL Injection vulnerability, I really don't think that's what causing it. Why do you thinks it's a SQL Injection? I'd say it's rather some subtle error in code that calculates the reward or handles the timer or both. Either way it's probably not trivial and would require a lot of time and effort to fully analyze. You can't expect that I'll fix every random script out there, that's just impossible. I have FaucetBOX.com, Faucet in a Box script and ScanTheBOX.com to maintain, that's engaging enough.

You should all just get in touch with each other and either force RaphaelM to fix that (he is the one that should do it after all if you paid him for the script) or hire someone to fix that and split the cost. Or you can always use the script that's officially supported by us. Or even Microfaucet, as it's already proven to be safe.

With all of that said... Something like that hurts everyone. I'll probably look into that (but no guarantees and I think that I won't be able to look into that before 10th July) if you send me the script source. But no one sent me the code yet, so how can I possibly help?

However, just like minifrij said, I think Elbandi would be a better person to ask if it's actually based on the Minifaucet.

I can't. Also that wouldn't help. The person that does it could just use another one.

Read this: https://bitcointalk.org/index.php?topic=844119.msg11504183#msg11504183 . Looks like there's a bug (on purpose or not) in this script. Change your script ASAP.

Do all these faucets use script customized by RaphaelM again?

EDIT: looks like they do. Well...:

https://bitcointalk.org/index.php?topic=844119.msg11504183#msg11504183
https://twitter.com/MakingMoneybtc/status/605329412251369472

Still working on it. It's not really high priority...

Should be fixed in r51. Can you confirm that?

Already working on it, sorry.

We've completely forgot about these, thanks. Will fix that soon.


Your browsers have cached old stylesheets. Clearing cache would fix that sooner

It's the downgraded performance I've mentioned in previous post. It should work most of the time, and in about 50 minutes problems should disappear.


No.

Oh, it's fixed already

There're no new features with this one however. We just had to update the database to keep up with the ever-increasing number of payouts and to clean up some legacy stuff.

Some inconsistencies were found after the update. We're back to maintenance, sorry.

EDIT: issue located, should be resolved in ~10 minutes.

FaucetBOX.com is back up now, however you may experience degraded performance for a few more hours. Please report any issues.

Sorry for this long downtime once again. I hope that the next one won't happen until September.

About 56% of last stage is done, rough ETA: 1h 15min.

EDIT: 87% complete.

EDIT2: any minute now.

The maintenance has started. It can take even a few hours, sorry for inconvenience..

Oh, looks like I've looked at that after you've changed it


You've added:


after the "Share this link with your friends". So it always sends the address as "http://winbits.us/?r=Your_Address" instead of what user puts in the input. Remove the 'name="address"' from this line and it should work fine.


Thanks, I've added it to our bugtracker

I hate coffee .

I don't know how fundraising is an accusation, it's a good thing o.O. Here's a random article about that: http://www.coindesk.com/xapo-sets-40-million-fundraising-record-bitcoin-industry/ .

And I really don't want to have an argument with you, but don't expect I'll be nice to you after what you did in previous thread. I'm 100% sure you weren't hacked. There was no sudden spike of payouts, no big payouts to single addresses, no weird logins to your FaucetBOX.com dashboard, no payouts to one-time, throw-away addresses, really NOTHING out of ordinary. Yet you claim that there's a wide-known vulnerability in the script (but of course you won't disclose it) and that nano-btc used that to steal coins from you.

We do what we can to prevent hacks. We implemented email notifications on login, simple MFA using email (more options coming), log of IP addresses that used the API key, and a config.php option to disable admin panel of the faucet script. And we keep implementing more and more security features.

We listen to our users, as can be confirmed by multiple reports on how good our support is and that we try to implement requested features (not all of them obviously, but those that are possible and most demanded).


Changethe div class from:
to
or even


I've already started a discussion with other devs about possible solutions. We'd like to avoid any premium memberships. How about data aggregation? Instead of showing only latest 15-50 payouts, we'd also show how much coins did you earn from each faucet the day before. So you could check the data only once a day and already have it processed, allowing you to see not only which faucets are legit, but also which one pays the most.