FaucetBOX.com Discussion

[thefaucetrunner]

Something funny happened with my Faucetbox account yesterday.

I accumulated 0.046 - was paid 0.023 which went pending and then my balance showed 0.008ish. Not sure what happened or if I was tripping, but I'm fairly sure something went wrong with the system yesterday. Kaz have you heard any other such reports or am I wrong?

I'm 80% sure this happened.

[Gifted]

Something funny happened with my Faucetbox account yesterday.

I accumulated 0.046 - was paid 0.023 which went pending and then my balance showed 0.008ish. Not sure what happened or if I was tripping, but I'm fairly sure something went wrong with the system yesterday. Kaz have you heard any other such reports or am I wrong?

I'm 80% sure this happened.

Well yesterday i think i got paid twice from faucetbox so your not the only one with weird going on . (i'm not complaining)

[thefaucetrunner]

I read in the thread before that your system has a cutoff point where all the payments are bundled etc and the amount logged at that time is sent.

I think something went wrong between the time the payout was logged and the amount that remained. It didn't make sense to me. BTW Gifted, what do you mean - paid duplicate amounts?

[pickupcoin]

do you have any idea, why when i visit my faucet, always have message that i need to wait xxx min. to claim. But i am not claim on my faucet, also other user suggest that problem. this is faucet http://pickupcoin.com/btc , anyway second faucet works fine http://www.pickupcoin.com/litecoin
i set the same settings on both faucet i think that i use R61 version
thanks

You're using CloudFlare and you haven't configured your faucet properly for that. Go to the "Reverse Proxy" tab in your faucet's admin panel and configure it there (but make sure you know what you're doing).

with the same settings ltc faucet working good, but btc faucet make the problem

[nawaraj]

Hi pickupcoin, How much cpc or ppc you get from bitmedia on your faucet.

[pickupcoin]

Hi pickupcoin, How much cpc or ppc you get from bitmedia on your faucet.

much less than adsense. i sent you PM.

[Kazuldur]

do you have any idea, why when i visit my faucet, always have message that i need to wait xxx min. to claim. But i am not claim on my faucet, also other user suggest that problem. this is faucet http://pickupcoin.com/btc , anyway second faucet works fine http://www.pickupcoin.com/litecoin
i set the same settings on both faucet i think that i use R61 version
thanks

You're using CloudFlare and you haven't configured your faucet properly for that. Go to the "Reverse Proxy" tab in your faucet's admin panel and configure it there (but make sure you know what you're doing).

with the same settings ltc faucet working good, but btc faucet make the problem

If you didn't protect your faucet from direct access and the script detected that, then it reverted the Reverse Proxy settings for safety.
It's not recommended to use CloudFlare for faucet if you don't know how it all works.

I read in the thread before that your system has a cutoff point where all the payments are bundled etc and the amount logged at that time is sent.

I think something went wrong between the time the payout was logged and the amount that remained. It didn't make sense to me. BTW Gifted, what do you mean - paid duplicate amounts?

What's your address? It looks like everything is correct in the system, we didn't detect any anomalies and didn't have any other reports, but I'll look into that.

Gifted, I'd like to have your address too if that's possible.

[starline2015]

Code:

[28-Oct-2015 03:36:47] PHP Notice:  Post request, but invalid address input name. in /home/fceth/public_html/index.php on line 2063
[28-Oct-2015 03:43:26] PHP Notice:  Post request, but session is invalid. in /home/fceth/public_html/index.php on line 2061
[28-Oct-2015 03:45:26] PHP Notice:  Post request, but session is invalid. in /home/fceth/public_html/index.php on line 2061
[28-Oct-2015 03:54:25] PHP Notice:  REFERER CHECK FAILED, ASSUMING CSRF! in /home/fceth/public_html/index.php on line 91
[28-Oct-2015 03:54:42] PHP Notice:  REFERER CHECK FAILED, ASSUMING CSRF! in /home/fceth/public_html/index.php on line 91

I keep getting a lot of these. My error log is about 1MB now. Running the latest version of the faucet script r62.

Nothing wrong here, probably just logs of blocked bot attacks. If you don't want to see that in your logs, set your error_reporting in php.ini to something that doesn't include notices.

My site ramdomly dont dispense satoshis, times yes, times not, trying claim from my computer and not reward, just reload and nothing pass.

My error log in similar condition, actived the sentence $display_errors = true;  my site show: "Notice: Post request, but session is invalid. in /ares/a1aweb/b1961/mior.bitcointowalletcom/index.php on line 2061"

runned "clear-security.php" (deleted after off course) = still the issue

any want can trow one little help thanks

http://www.bitcointowallet.com

[Kazuldur]

My site ramdomly dont dispense satoshis, times yes, times not, trying claim from my computer and not reward, just reload and nothing pass.

My error log in similar condition, actived the sentence $display_errors = true;  my site show: "Notice: Post request, but session is invalid. in /ares/a1aweb/b1961/mior.bitcointowalletcom/index.php on line 2061"

"Post request, but session is invalid." means that for some reason coins were requested, but server doesn't know or remember who requested it. It's important, as everyone gets different token for claiming coins for security reasons. In most cases that's because a bot is trying to claim coins directly as a first request to your faucet, but if that happens to you then one of these happened:

1. you waited reaaaallly long between opening your faucet and actually requesting coins
2. you cleared cookies or your browser didn't accept cookies at all
3. your server doesn't have sessions configured properly (that happens a lot unfortunately)
4. your server clears sessions too often
5. your server is under too big load and it's forced to clear sessions to free space, or it's not even able to properly start a session anymore
6. you have multiple web servers with separate session stores and your load balancer isn't sticky (I've actually seen that happen on one shared hosting)

[misterbit]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {}
If (getIP () == trim ($torIP)) {}
banned();
}
}
Greetings thank you.

[minifrij]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.

The Tor list and NastyHosts both achieve different purposes. You should have both.
Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces.

[misterbit]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.

The Tor list and NastyHosts both achieve different purposes. You should have both.
Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces.

OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?

[minifrij]

OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?

The Tor list and NastyHosts are two seperate services. The Tor list stops Tor only stops Tor, whereas NastyHosts stops malicious hostnames and other things.

[rkandrades]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.

The Tor list and NastyHosts both achieve different purposes. You should have both.
Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces.

OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?

Friend... you can do this way:

Code:

// Put your site IP bellow (you can ping your URL to get the IP)
$mySiteIp = '111.111.111.111'

//Get the visitor IP
$ip=$_SERVER['REMOTE_ADDR'];

//get the list of nodes that can achieve your site
$torList = file_get_contents("https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$mySiteIp&port=80");

//remove your IP address from the list. It is listed in the file header.
$torList = str_replace((string)$mySiteIp,"",$torList);

//check if the visitor IP is in the TOR list
if ((strpos((string)$torList, (string)$ip)) !== false)
{
	banned();
}

[ragi]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.

The Tor list and NastyHosts both achieve different purposes. You should have both.
Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces.

OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?

Friend... you can do this way:

Code:

// Put your site IP bellow ( you can ping wour URL to get the IP)
$myIp = '111.111.111.111'

//Get the visitor IP
$ip=$_SERVER['REMOTE_ADDR'];

//get the list of nodes that can achiveve your site
$torList = file_get_contents("https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$myIp&port=80");

//remove your IP address from the list. It is listed in the fle header.
$torList = str_replace((string)$myIp,"",$torList);

//check if the visitor IP is in the TOR list
if ((strpos((string)$torList, (string)$ip)) !== false)
{
	banned();
}

Does that really work? I am on mobile and cannot test it right now.

[rkandrades]

I friend, if I put the torlist.txt in the index should activate the Nastyhost?
foreach (file('torlist.txt') as $torIP) {
If (getIP () == trim ($torIP)) {
banned();
}
}
Greetings thank you.

The Tor list and NastyHosts both achieve different purposes. You should have both.
Also. I fixed your code. You only need the opening brace '{' on lines 1 and 2, not both braces.

OK thanks, seems that the code was changed when I put it here.
Then I activate Nastyhost to run the torlist?

Friend... you can do this way:

Code:

// Put your site IP bellow ( you can ping wour URL to get the IP)
$myIp = '111.111.111.111'

//Get the visitor IP
$ip=$_SERVER['REMOTE_ADDR'];

//get the list of nodes that can achiveve your site
$torList = file_get_contents("https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$myIp&port=80");

//remove your IP address from the list. It is listed in the fle header.
$torList = str_replace((string)$myIp,"",$torList);

//check if the visitor IP is in the TOR list
if ((strpos((string)$torList, (string)$ip)) !== false)
{
	banned();
}

Does that really work? I am on mobile and cannot test it right now.

Yes. I am using this.

At really this is a little part of my security algorithm. I have a 6 layers barrier to block th access of scammers to my faucet.

This is one os these layers.

Of course it works fine.

[minifrij]

Friend... you can do this way:

Code:

snip

This seems like a much better way to do it in fact. Though, there are a few modifications I would like to make.
Firstly, the Server IP doesn't have to be inputted manually, and it maybe a pain if the server's IP is dynamic. You can probably just use $_SERVER['SERVER_ADDR']; as a replacement.

Secondly, AFAIK strpos is a really bad way to detect other IPs as it could return false positives. For example, if this is executed:

Code:

if(strpos('abcdefghijklmnopqrstuvwxyz', 'hello') !== false){
     //executable code
}

It will run the code inside as the characters in the string 'hello' are within the alphabet, regardless of the order. A better way to go about searching the list would be to turn it into an array and use a foreach loop. You can probably go about doing this by using code similar to this:

Code:

foreach(explode("\n", $torList) as $torIP){
     if($torIP == $ip){
          banned();
     }
}

This code splits the list by every new line and cycles through it, trying to match every IP in the list with the current user's IP. If it finds a match, it bans the user.

[rkandrades]

Friend... you can do this way:

Code:

snip

This seems like a much better way to do it in fact. Though, there are a few modifications I would like to make.
Firstly, the Server IP doesn't have to be inputted manually, and it maybe a pain if the server's IP is dynamic. You can probably just use $_SERVER['SERVER_ADDR']; as a replacement.

Secondly, AFAIK strpos is a really bad way to detect other IPs as it could return false positives. For example, if this is executed:

Code:

if(strpos('abcdefghijklmnopqrstuvwxyz', 'hello') !== false){
     //executable code
}

It will run the code inside as the characters in the string 'hello' are within the alphabet, regardless of the order. A better way to go about searching the list would be to turn it into an array and use a foreach loop. You can probably go about doing this by using code similar to this:

Code:

foreach(explode("\n", $torList) as $torIP){
     if($torIP == $ip){
          banned();
     }
}

This code splits the list by every new line and cycles through it, trying to match every IP in the list with the current user's IP. If it finds a match, it bans the user.

Thank you for these improvments.

I'm using the strpos because I'm printing more than just the IP per line. I use a tag to identify what layer of my agorithm blocked the IP.

It is something like this: LAYER1 - BLOECKED_IP\n

Then.. strpos is working well for me in this format.

[minifrij]

I'm using the strpos because I'm printing more than just the IP per line. I use a tag to identify what layer of my agorithm blocked the IP.

It is something like this: LAYER1 - BLOECKED_IP\n

Then.. strpos is working well for me in this format.

I can understand what you mean, and if it works well for you then there is little point to change it. However, I was just pointing out that strpos can return incorrect strings under certain circumstances. If you're not too worried about a fairly small amount of real users not being able to access your site there is no need to change your code.

If you really wanted to change it though, you could probably just use explode and str_replace to get the IP alone. Something like this:

Code:

$explodedStr = explode(' ', 'LAYER1 - BLOECKED_IP\n');
$finalIP = str_replace("\n", '', $explodedStr);

Obviously it will probably need some tinkering as in my experience these sorts of things never tend to work first time, though you could probably hack around it if you needed to.

[rkandrades]

I'm using the strpos because I'm printing more than just the IP per line. I use a tag to identify what layer of my agorithm blocked the IP.

It is something like this: LAYER1 - BLOECKED_IP\n

Then.. strpos is working well for me in this format.

I can understand what you mean, and if it works well for you then there is little point to change it. However, I was just pointing out that strpos can return incorrect strings under certain circumstances. If you're not too worried about a fairly small amount of real users not being able to access your site there is no need to change your code.

If you really wanted to change it though, you could probably just use explode and str_replace to get the IP alone. Something like this:

Code:

$explodedStr = explode(' ', 'LAYER1 - BLOECKED_IP\n');
$finalIP = str_replace("\n", '', $explodedStr);

Obviously it will probably need some tinkering as in my experience these sorts of things never tend to work first time, though you could probably hack around it if you needed to.

Well...

I just created a php file with you example above and installed it into my host.

A did run the php file and it doesn't execute the code inside the if.

Are you sure that your example returns true?