FaucetBOX.com Discussion

[ptrio]

I myself wouldn't trust referer headers as they could be fabricated.

While I didn't trust them too for FaucetBOX.com, how could they be fabricated in context of CSRF? If I were to attack you using CSRF I wouldn't be able to force your browser to fake the referrer.

You are right. Referer check seems to be good enough to protect against CSRF. However there's ways to get in control of someone's browser and then spoof the headers(is XSS + CSRF possible?). Also what about HTTPS or if someone's browser doesn't send the referer headers (guess 99% do but still)? That would be considered as an attack.

BTW Do you guys support p2sh for litecoin yet?

If you control someone's browser, why bother with CSRF? You can just attack directly . HTTPS isn't a problem, referrer will be correct on the site itself and possibly not set/empty when coming from other sites (then one just assumes it's invalid). If someone's browser doesn't send headers, too bad. It's not perfect solution, it's just easiest. You should generate a token, save it in session, add it as hidden input in form and compare it on request. But that require more changes, while referrer check will be sufficient for most.

Still no P2SH for Litecoin yet. No ETA either.

Touche I tried to come up with something but shot myself in the leg instead.

[BitHell.io]

Login does not work on FaucetBox at the moment. After inserting the credentials , I get redirected to a blank screen.

Hope it gets fixed soon.

[MakingMoneyHoney]

Login does not work on FaucetBox at the moment. After inserting the credentials , I get redirected to a blank screen.

Hope it gets fixed soon.

I just went to the old thread, to post that. I forgot there was a new thread. Hope this gets fixed soon. But I'm glad it wasn't just me, lol.

[dart vader]

Login does not work on FaucetBox at the moment. After inserting the credentials , I get redirected to a blank screen.

Hope it gets fixed soon.

same here

[yvesp110]

Do all these faucets use script customized by RaphaelM again?

EDIT: looks like they do. Well...:

https://bitcointalk.org/index.php?topic=844119.msg11504183#msg11504183
https://twitter.com/MakingMoneybtc/status/605329412251369472

LOL funny if it is Raphael script there is a bug but one of faucetbox script don't have a bug yeah right. Kazaldure is too funny anyway glad I am done with him and passed on my faucet using his script to my techs who sees it is not worth it running them

[asmoday]

Why I can't login in my admin panel on FaucetBox? (manage faucets)
When login, I can see a white page..

[horace0812]

I don't know why I did not received my payout for 7/7, even the payout for 8/7 is already received few hours ago.
Any 1 have the same issue above too

[Kazuldur]

I don't know why I did not received my payout for 7/7, even the payout for 8/7 is already received few hours ago.
Any 1 have the same issue above too

It was already mentioned in this thread. It's because of the spam attack on Bitcoin network: https://www.reddit.com/r/Bitcoin/comments/3cfext/bitcoin_under_attack/ . It should get confirmed as soon as the number of unconfirmed transactions drops to something sane: https://blockchain.info/unconfirmed-transactions .

[ranlo]

I don't know why I did not received my payout for 7/7, even the payout for 8/7 is already received few hours ago.
Any 1 have the same issue above too

It was already mentioned in this thread. It's because of the spam attack on Bitcoin network: https://www.reddit.com/r/Bitcoin/comments/3cfext/bitcoin_under_attack/ . It should get confirmed as soon as the number of unconfirmed transactions drops to something sane: https://blockchain.info/unconfirmed-transactions .

It looks like it was actually blocked. Here's an example of my personal transaction coming from FaucetBox:

https://blockchain.info/tx/e9ee41881cb7d38308ac80bb204b55da3877d7b64084872b7d78a4fc9aa9747e/359

I'm wondering if this isn't a bigger issue than just it being lagged... according to BlockChain, it's blocked because it has too many outputs and the server rejects it.

[Kazuldur]

I don't know why I did not received my payout for 7/7, even the payout for 8/7 is already received few hours ago.
Any 1 have the same issue above too

It was already mentioned in this thread. It's because of the spam attack on Bitcoin network: https://www.reddit.com/r/Bitcoin/comments/3cfext/bitcoin_under_attack/ . It should get confirmed as soon as the number of unconfirmed transactions drops to something sane: https://blockchain.info/unconfirmed-transactions .

It looks like it was actually blocked. Here's an example of my personal transaction coming from FaucetBox:

https://blockchain.info/tx/e9ee41881cb7d38308ac80bb204b55da3877d7b64084872b7d78a4fc9aa9747e/359

I'm wondering if this isn't a bigger issue than just it being lagged... according to BlockChain, it's blocked because it has too many outputs and the server rejects it.

I believe that's not related, it was happening since the beginning of FaucetBOX.com (only that earlier Blockchain.info simply showed 'Transaction not found' message) and it looks like it's Blockchain.info's not-standard behavior. Other nodes relay our transactions just fine, while Blockchain.info only acknowledges our transactions after they're included in block.

[ranlo]

I don't know why I did not received my payout for 7/7, even the payout for 8/7 is already received few hours ago.
Any 1 have the same issue above too

It was already mentioned in this thread. It's because of the spam attack on Bitcoin network: https://www.reddit.com/r/Bitcoin/comments/3cfext/bitcoin_under_attack/ . It should get confirmed as soon as the number of unconfirmed transactions drops to something sane: https://blockchain.info/unconfirmed-transactions .

It looks like it was actually blocked. Here's an example of my personal transaction coming from FaucetBox:

https://blockchain.info/tx/e9ee41881cb7d38308ac80bb204b55da3877d7b64084872b7d78a4fc9aa9747e/359

I'm wondering if this isn't a bigger issue than just it being lagged... according to BlockChain, it's blocked because it has too many outputs and the server rejects it.

I believe that's not related, it was happening since the beginning of FaucetBOX.com (only that earlier Blockchain.info simply showed 'Transaction not found' message) and it looks like it's Blockchain.info's not-standard behavior. Other nodes relay our transactions just fine, while Blockchain.info only acknowledges our transactions after they're included in block.

Ahhh, interesting! I did notice that the transaction was already pending to the wallet it's going to, and other explorers (like blockr.io) show it fine, just figured maybe Blockchain's error was a bit more verbose than most of these others.

It does lead to the question, though... why are later transactions still coming through? The one from the 7th should have more "weight" as it's older, and should go through before the new ones from FaucetBox, being that they both paid the same (relative amount of) fees.

This is definitely an interesting situation. I'm guessing if worst comes to worst, you can just re-broadcast it or revert things back (add the funds back to each address to be sent out again once everyone's new transaction is ready) though.

[Kazuldur]

It does lead to the question, though... why are later transactions still coming through? The one from the 7th should have more "weight" as it's older, and should go through before the new ones from FaucetBox, being that they both paid the same (relative amount of) fees.

Take this transaction as an example:
https://btc.blockr.io/tx/info/03d6e645fba49e07f3a4d8f173dce3ae590a5e0b06f28b367e29d7e64926019d
has 0.00339447 BTC fee for 15164 bytes, and it's almost 6% of what was actually transfered to users (0.05664565 BTC).
So the fee is ~0.0002260 BTC/kB

Another one is:
https://blockchain.info/tx/1d8e35cbcad0c7814fde8c0e775259107e5adc32900263d9cc1358626a0ecb0b
0.0052392 BTC fee for 17561 bytes, so it's ~0.00030819 BTC/kB

Now example that didn't get through:
https://www.biteasy.com/blockchain/transactions/e9ee41881cb7d38308ac80bb204b55da3877d7b64084872b7d78a4fc9aa9747e
0.00194831 BTC fee for 17426 bytes, so it's ~0.00011460 BTC/kB.

What matters is the fee/kB and you can see that we increased fees ~2-3x.

This is definitely an interesting situation. I'm guessing if worst comes to worst, you can just re-broadcast it or revert things back (add the funds back to each address to be sent out again once everyone's new transaction is ready) though.

We continuously rebroadcast it. We would rather avoid reverting it though, as it could get messy. What's more plausible is that we'll just send double-spends with increased fees. Does anyone know a tool that'll make that easier? I don't want to mess around with raw transactions by hand

[ranlo]

It does lead to the question, though... why are later transactions still coming through? The one from the 7th should have more "weight" as it's older, and should go through before the new ones from FaucetBox, being that they both paid the same (relative amount of) fees.

Take this transaction as an example:
https://btc.blockr.io/tx/info/03d6e645fba49e07f3a4d8f173dce3ae590a5e0b06f28b367e29d7e64926019d
has 0.00339447 BTC fee for 15164 bytes, and it's almost 6% of what was actually transfered to users (0.05664565 BTC).
So the fee is ~0.0002260 BTC/kB

Another one is:
https://blockchain.info/tx/1d8e35cbcad0c7814fde8c0e775259107e5adc32900263d9cc1358626a0ecb0b
0.0052392 BTC fee for 17561 bytes, so it's ~0.00030819 BTC/kB

Now example that didn't get through:
https://www.biteasy.com/blockchain/transactions/e9ee41881cb7d38308ac80bb204b55da3877d7b64084872b7d78a4fc9aa9747e
0.00194831 BTC fee for 17426 bytes, so it's ~0.00011460 BTC/kB.

What matters is the fee/kB and you can see that we increased fees ~2-3x.

This is definitely an interesting situation. I'm guessing if worst comes to worst, you can just re-broadcast it or revert things back (add the funds back to each address to be sent out again once everyone's new transaction is ready) though.

We continuously rebroadcast it. We would rather avoid reverting it though, as it could get messy. What's more plausible is that we'll just send double-spends with increased fees. Does anyone know a tool that'll make that easier? I don't want to mess around with raw transactions by hand

Increased fees definitely make a difference -- I wasn't aware that you changed them, .

So essentially, right now the weight is still growing, and "should" be a priority soon. Hopefully.

[Salmen]

Hello,
Some faucet getting problems with the script of RaphaelM.

Here are some security features, that I use:
- CSRF protection
- htmlspecialchars, htmlentites protect
- Valide Bitcoin Address before checking database
- mysql_real_escape_string
- Anti Adblock

Tip: Use Captcha in the Login Form

If you use these protection, your faucet is protected against SQL Injection and Bots

Cheers
Salmen

[cjrosero]

Can anyone here have tips on how to get accepted on  Google adsense ads?

[Racey]

hi my faucet is protected or not? http://freebitcoinindia.16mb.com/

Please Disable Ad-Block To View This Website.

By D3xt3r

Well that is the wrong message, I do not have any form of Adblocking.

[Kazuldur]

Can anyone here have tips on how to get accepted on  Google adsense ads?

It's easiest to use another site to get your account accepted and then simply embed ads on your faucet too. You only need to get one site approved and then you can use AdSense on all of them (if they don't break the ToS of course);

[Kazuldur]

So essentially, right now the weight is still growing, and "should" be a priority soon. Hopefully.

They got confirmed. Finally .

[cjrosero]

Can anyone here have tips on how to get accepted on  Google adsense ads?

It's easiest to use another site to get your account accepted and then simply embed ads on your faucet too. You only need to get one site approved and then you can use AdSense on all of them (if they don't break the ToS of course);

doing that might get the account disable i believe. anyway please guide me

 i have tried every thing when adding ads on the Template section and pressing the save below i got :
"Forbidden
You don't have permission to access / on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request."

i tried doing the process from the start what seems to be the problem!?

[Kazuldur]

i have tried every thing when adding ads on the Template section and pressing the save below i got :
"Forbidden
You don't have permission to access / on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request."

i tried doing the process from the start what seems to be the problem!?

It's a XSS protection of your hosting. It probably blocks all POST requests with <script> and <iframe> tags. Contact your hosting about that.