AlexAce420 (OP)
Member
 Offline
Activity: 155
Merit: 10
|
 |
October 17, 2015, 03:01:53 PM
Last edit: November 04, 2015, 03:28:25 PM by AlexAce420 |
|
Everything in this tutorial is being used on my faucet. Check it out HERE to see it in action!
Step 1In the root directory of your server, there should be a file called .htaccess, HERE'S WHAT MINE LOOKS LIKE Copy and paste it to yours. This will block all the TOR relays/exit nodes from accessing your website. TOR is good to block because it's one of the main things people use to bypass your time limit. Just google "bypass faucet time limit" you will see that it's one of the ways people bypass your time limit. To get an updated list of tor exit nodes visit https://www.dan.me.uk/torlist/Here's a website to paste the IP's, it will generate the proper code for you. http://www.htaccesstools.com/block-ips/
Step TwoIn your faucet template, ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php, place this code, anywhere in the <head> tag. <?php
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");
function checkProxy($ip){
$contactEmail="EMAIL";
$timeout=3;
$banOnProability=0.99;
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
$response=curl_exec($ch);
curl_close($ch);
if ($response > $banOnProability) {
return true;
} else {
if ($response < 0 || strcmp($response, "") == 0 ) {
//The server returned an error, you might want to do something
//like write to a log file or email yourself
//This could be true due to an invalid input or you've exceeded
//the number of allowed queries. Figure out why this is happening
//because you aren't protected by the system anymore
//Leaving this section blank is dangerous because you assume
//that you're still protected, which is incorrect
//and you might think GetIPIntel isn't accurate anymore
//which is also incorrect.
//failure to implement error handling is bad for the both of us
}
return false;
}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
?>
Here's a website to check if your faucet is still vulnerable. http://boomproxy.com/
Step ThreeLog into funcaptcha, then click "site settings"  Scroll down and click on the little gear, underneath "setup".  Then scroll down to the "security" tab select "always enhanced". Click save, then wait 5-10 minutes. Your captcha will now be alot harder for bots to bypass. 
Step FourIn step four we will be adding a simple math question displayed as an image as a second captcha. Faucet users cannot claim their satoshi until the math question is solved. Download PHP captcha HERE extract it and add the "captcha" folder to your root directory. If you don't trust that download you can find the original HERE, it will require some configuring though. Now open your template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) paste the following code at the very top line above <!DOCTYPE html>: <?php session_start(); ?>
Paste the following code where you would like the equation to appear <img id="captcha" src="/captcha/securimage_show.php" alt="CAPTCHA Image" />
<br>
<a href="#" onclick="document.getElementById('captcha').src = '/captcha/securimage_show.php?' + Math.random(); return false">[ New Problem ]</a>
<br>
<br>
<input type="text" name="captcha_code" size="10" maxlength="6" />
<br>
<br>
Now you need to create a PHP document. I use a program called Notepad++, however any text editor will work. Create a new document, then paste in the following code: <?php>
include_once $_SERVER['DOCUMENT_ROOT'] . '/captcha/securimage.php';
$securimage = new Securimage();
if ($securimage->check($_POST['captcha_code']) == false) {
// the code was incorrect
// you should handle the error so that the form processor doesn't continue
// or you can use the following code if there is no validation or you do not know how
echo "I'm sorry but you have to answer the math question correctly!.<br /><br />";
echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator.";
exit;
}
?>
Keep the document open. Open your faucet index page, it will most likely be index.php in your ROOTDIRECTORY. (Not the template index.php) Now press CTRL+A and select everything and copy it. Go back to the document you were just making and paste it on the very bottom, underneath the ?> Now save the file as what ever you want, I called mine math.php. Go back to your faucet template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) search for the following: <form method="POST" class="form-horizontal" role="form">on that same line link your PHP file to it like so: <form action="math.php" method="POST" class="form-horizontal" role="form">
Now you should have a working math eqution that users have to answer correctly before using your faucet.
I hope this helps other faucet owners, as it's terrible how bots think they can steal our valuable satoshis :3 You try and be nice, by giving people free bitcoins and they feel the need to exploit it. |
|
|
|
|
|
|
|
|
|
|
|
The trust scores you see are subjective; they will change depending on who you have in your trust list. |
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
 |
October 17, 2015, 03:52:28 PM
Last edit: October 28, 2015, 10:32:34 PM by AlexAce420 |
|
OptionalI have google analytics on my faucet and I realized that, almost all the traffic was coming from Russia or China.... So I found out about this site called http://www.blockacountry.com, it allows you to block whole countries from accessing your website. This route is optional, but super effective. The only downside is it affects real people from accessing your faucet.
|
|
|
|
|
nijkamp
Member
Offline
Activity: 115
Merit: 10
|
|
October 17, 2015, 03:53:55 PM |
|
There are a lot of fuking ips mate! all are ips bots?
can i talk with u via skype?
best regards
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 17, 2015, 04:11:07 PM |
|
They're TOR ips and in my new .htaccess I've blocked Russia and China from accessing my faucet. It appears to have stopped them.
|
|
|
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 17, 2015, 04:50:19 PM |
|
Yes, except yours didn't work very well, I was still getting ALOT of bots. |
|
|
|
|
nijkamp
Member
Offline
Activity: 115
Merit: 10
|
|
October 17, 2015, 04:52:04 PM |
|
how is going for u essence owner? 6700 ip`s banned o.O?
|
|
|
|
|
|
|
misterbit
|
|
October 17, 2015, 05:01:27 PM |
|
Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
|
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 17, 2015, 05:03:45 PM |
|
how is going for u essence owner? 6700 ip`s banned o.O?
They're TOR relays and IP's that I don't want accessing my faucet, It's going very well since I've banned them, my faucet is doing ALOT better.  Well played, it would be impossible to stop every VPN though. So I'm satisfied. |
|
|
|
|
nijkamp
Member
Offline
Activity: 115
Merit: 10
|
|
October 17, 2015, 05:04:14 PM |
|
what is that misterbit? can u explain a bit please ? |
|
|
|
|
misterbit
|
|
October 17, 2015, 05:08:38 PM |
|
Hello, it is a rule that I found on the net to block proxies what is that misterbit? can u explain a bit please ? |
|
|
|
|
|
misterbit
|
|
October 17, 2015, 05:10:12 PM |
|
great dude, but I believe that I did it I is almost the same as that. how is going for u essence owner? 6700 ip`s banned o.O?
They're TOR relays and IP's that I don't want accessing my faucet, It's going very well since I've banned them, my faucet is doing ALOT better. Well played, it would be impossible to stop every VPN though. So I'm satisfied. |
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 17, 2015, 05:16:45 PM |
|
Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
THANK YOU! |
|
|
|
|
|
misterbit
|
|
October 17, 2015, 05:18:27 PM |
|
Friend beside, if you put the email as I did by passing the limit of requests would you email like this that I got to my. Hi there,
I've noticed in the error logs that you're exceeding the amount of
requests per minute, which results in a HTTP 429 error and the web page
will return a blank result. When this happens, your online application
will no longer be protected.
This is just a notification, if you'd like to discuss guarantees in
query amounts higher than the one listed on the website, let me know.
Otherwise, there's no action required on your part.
That means having a bumper and passing it the anti proxy system does not serve unfortunately for us. |
|
|
|
|
nijkamp
Member
Offline
Activity: 115
Merit: 10
|
|
October 17, 2015, 05:31:36 PM |
|
Then we need to copy and paste that to unable proxyes in our web? did i understand well?
|
|
|
|
|
lol3c
|
|
October 17, 2015, 05:42:27 PM |
|
Thanks for this information, we are in really need of this topics. I also applied some of them.
|
|
|
|
|
|
mari88
|
|
October 18, 2015, 12:53:37 PM |
|
really big thanks will test your code on my Faucet  |
|
|
|
|
|
FaucetRank.com
|
|
October 22, 2015, 01:17:08 PM |
|
Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
where to put this ? in .htaccess file ? |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 22, 2015, 01:44:43 PM |
|
Friend beside, if you put the email as I did by passing the limit of requests would you email like this that I got to my. Hi there,
I've noticed in the error logs that you're exceeding the amount of
requests per minute, which results in a HTTP 429 error and the web page
will return a blank result. When this happens, your online application
will no longer be protected.
This is just a notification, if you'd like to discuss guarantees in
query amounts higher than the one listed on the website, let me know.
Otherwise, there's no action required on your part.
That means having a bumper and passing it the anti proxy system does not serve unfortunately for us. I'm thinking to develop a way to send just the authorizated amount of request to avoid exceed the limits. In addition to I will log the non requested issues to have an idea of how many request I would need for my site... The IpGetIntel owner sells daily packages of queries also... When I finish this script I will share with you. Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
where to put this ? in .htaccess file ? Yes. This is a code to be inserted into .htaccess file. |
|
|
|
|
FaucetRank.com
|
|
October 22, 2015, 02:19:51 PM |
|
I'm having problem after putting above code in my htaccess file  |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
FaucetWorld
|
|
October 22, 2015, 03:33:02 PM |
|
They're TOR ips and in my new .htaccess I've blocked Russia and China from accessing my faucet. It appears to have stopped them.
Blocking Russia, China or other country will not help you! Only blocking proxies can help with this fight! Thank you guys for great job! |
|
|
|
|
|
mari88
|
|
October 23, 2015, 11:11:22 AM |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root  kind regrads |
|
|
|
|
|
FaucetRank.com
|
|
October 23, 2015, 12:29:48 PM |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root kind regrads Probably you did something wrong |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
altcoinhosting
|
|
October 23, 2015, 12:32:44 PM |
|
Nice function... For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution. Thanks for contributing to the community EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this |
|
|
|
|
mari88
|
|
October 23, 2015, 12:43:35 PM
Last edit: October 23, 2015, 01:43:57 PM by mari88 |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root kind regrads Probably you did something wrong whooooow what a helping user you spamer  i know that something is wrong hat these spamers ...... i have fixxed the problem with CTRL+F5 Script now working thanks. kind regrads |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 01:41:03 PM |
|
Guys... I just developed a very effective proxy server barrier!
My solution has 4 layers of protection.
1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist.
2nd layer: TOR users protection. Almost 100% effective.
3rd layer: Popular and Known Proxy Servers blocked.
4th layer: Unknown proxies blocked by intelligent algorithms.
It works for any site running PHP.
If you are interested in a deal, send me a PM. You can test the service first.
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 23, 2015, 01:52:44 PM |
|
Morning everyone, I have just updated my original post and I am having great luck in the fight against bots! Nice function... For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution. Thanks for contributing to the community EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this Check out step one on my original post, it explains how to block tor exit nodes. Guys... I just developed a very effective proxy server barrier!My solution has 4 layers of protection. 1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist. 2nd layer: TOR users protection. Almost 100% effective. 3rd layer: Popular and Known Proxy Servers blocked. 4th layer: Unknown proxies blocked by intelligent algorithms. It works for any site running PHP. I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page). If you are interested in a deal, send me a PM. Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave. |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 01:58:17 PM |
|
Morning everyone, I have just updated my original post and I am having great luck in the fight against bots! Guys... I just developed a very effective proxy server barrier!My solution has 4 layers of protection. 1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist. 2nd layer: TOR users protection. Almost 100% effective. 3rd layer: Popular and Known Proxy Servers blocked. 4th layer: Unknown proxies blocked by intelligent algorithms. It works for any site running PHP. I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page). If you are interested in a deal, send me a PM. Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave. No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0 |
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 23, 2015, 02:05:17 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 02:24:41 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time. |
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 02:36:44 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time. Ah... One more thing. My barrier is producing good stats and logs. In some days I will share the most identified proxies IP list with everyone for free. Give me two or three days. |
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 24, 2015, 02:32:47 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time. Ah... One more thing. My barrier is producing good stats and logs. In some days I will share the most identified proxies IP list with everyone for free. Give me two or three days. Guys... These are the proxy servers and scam IPs that my barrier blocked yesterday. Use for your safe and for free. 162.254.149.195
85.25.201.120
149.210.131.21
159.253.128.175
95.141.187.216
5.13.207.5
52.5.121.103
179.107.42.151
199.115.117.194
216.218.131.173
65.49.14.148
81.95.123.216
199.115.117.242
173.245.65.202
37.27.61.32
162.213.40.198
107.170.17.131
162.243.158.7
95.141.20.199
45.55.49.75
162.243.127.7
122.155.34.42
199.115.117.243
159.253.128.172
46.34.213.220
159.253.128.169
46.23.66.106
188.138.8.70
66.171.228.75
188.166.121.88
188.226.170.140
145.249.150.87
178.255.153.247
207.244.86.211
108.168.239.92
5.14.141.64
103.10.199.38
66.171.228.247
49.213.18.108
104.236.70.228
217.118.23.97
108.168.159.147
50.116.9.34
45.114.116.209
198.7.58.81
46.101.35.224
119.247.191.114
194.169.217.14
46.4.79.135
93.184.65.176
128.199.53.63
144.76.44.114
146.185.28.178
51.39.128.155
190.248.68.138
173.245.65.88
54.176.17.88
31.47.127.155
38.95.109.38
B81.169.156.135
B146.0.32.8
B198.204.255.122
B162.220.59.66
B195.154.49.144
B96.31.64.186
169.57.121.204
108.168.159.138
38.95.108.244
157.7.164.19
5.13.214.38
188.126.71.90
200.219.249.89
46.28.53.125
108.168.159.144
209.95.51.184
65.49.14.168
116.193.159.34
103.10.197.130
5.45.255.102
5.63.149.102
188.138.56.112
37.48.116.165
23.235.227.109
162.245.145.229
104.131.147.112
103.10.197.90
103.10.197.154
208.123.223.158
B185.28.191.30
45.114.116.66
37.143.95.218
104.236.195.147
66.102.9.40
64.233.172.194
B1.234.45.50
207.244.79.151
B59.8.174.50
23.101.61.176
192.95.47.194
54.191.171.19
173.245.65.3
37.27.44.202
104.156.233.66
5.39.126.59
207.244.79.141
193.109.196.47
107.170.186.79
B52.68.132.0
188.226.155.106
195.58.245.142
173.247.227.146
208.123.223.147
104.232.37.35
49.213.21.108
46.167.121.31
217.78.6.229
104.209.188.207
37.143.89.206
46.165.234.137
148.251.232.140
216.158.192.226
104.131.66.8
176.9.2.173
193.164.133.40
61.19.228.78
4.26.209.54
198.7.59.110
46.165.210.87
123.202.90.219
94.76.233.203
100.43.90.8
54.210.237.68
54.175.89.172
46.23.66.109
37.130.224.22
159.253.128.168
8.28.16.254
46.23.66.107
69.160.43.237
54.176.137.163
176.9.2.173
159.253.128.166
37.99.89.224
209.85.238.18
46.236.26.103
106.187.49.88
162.213.197.190
5.13.239.179
50.117.34.138
66.249.73.242
66.249.73.138
209.85.238.9
54.209.60.63
66.249.73.130
209.85.238.127
78.106.208.116
46.118.100.186
54.219.106.162
206.190.138.20
66.249.84.103
37.27.62.221
128.75.125.34
168.235.194.180
100.43.81.134
128.199.81.128
179.43.147.83
64.233.173.57
65.49.68.194
207.244.79.152
217.118.23.115
208.123.223.152
5.45.192.81
37.229.123.234
128.199.106.5
208.123.223.215
109.86.244.239
208.123.223.52
5.166.194.82
208.123.223.231
176.15.106.169
188.166.109.30
208.123.223.169
5.248.35.11
94.153.44.107
208.123.223.36
69.80.103.148
95.211.226.38
104.196.9.35
106.186.118.77
209.95.51.183
109.86.47.88
208.123.223.127
52.23.156.32
188.138.147.22
188.163.99.194
178.162.208.141
208.123.223.94
104.197.56.196
207.244.76.210
176.194.119.107
178.162.217.146
168.235.198.84
162.245.144.253
5.45.255.69
208.123.223.91
54.173.202.107
8.37.224.103
208.123.223.148
148.251.83.41
207.244.77.1
208.123.223.251
207.244.96.236
93.80.158.30
208.123.223.199
208.123.223.101
5.63.149.98
104.131.209.90
66.85.139.246
178.162.197.211
173.245.65.198 |
|
|
|
|
ofirbeigel
|
|
October 25, 2015, 01:09:06 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
|
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
|
FaucetWorld
|
|
October 25, 2015, 01:23:53 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update. |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 25, 2015, 02:14:08 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update. Exactly. All in this topic will help you so much. But it isn't enough. We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too. Do you now how to do simple changes in a PHP code? |
|
|
|
|
ofirbeigel
|
|
October 25, 2015, 02:16:18 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update. Exactly. All in this topic will help you so much. But it isn't enough. We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too. Do you now how to do simple changes in a PHP code? Yes I do and I already implemented what's in here. Hope this helps. |
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
|
ofirbeigel
|
|
October 26, 2015, 07:54:41 AM |
|
I can't seem to find the FunCaptcha security options you talk about in the OP. I just get a very basic webpage where I can retrieve my keys.
|
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
|
Gifted
|
|
October 26, 2015, 07:15:54 PM |
|
Alright, so my faucet www.bit-essence.com was getting raped by bots. Here are two pictures, one showing how bad it was, the other showing how much better I made it. Before I go and take credit for this, I got some information from MASETRBIT in this thread: https://bitcointalk.org/index.php?topic=1210279.0Before After As you can see, from the time the payouts were made, I have made a huge dent in bots accessing my faucet. Here's how: FirstIn the root directory of your server, there should be a file called .htaccess, HERE'S WHAT MINE LOOK LIKE Copy and paste it to yours. This will block all the TOR relays/exit nodes from accessing your website. TOR is good to block because it's one of the main things people use to bypass your time limit. Just google "bypass faucet time limit" you will see that it's one of the ways people bypass your time limit. To get an updated list of tor exit nodes visit https://www.dan.me.uk/torlist/Here's a website to paste the IP's, it will generate the proper code for you. http://www.htaccesstools.com/block-ips/SecondIn your faucet template, ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php, place this code, above <!DOCTYPE html> <?php
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");
function checkProxy($ip){
$contactEmail="EMAIL";
$timeout=3;
$banOnProability=0.99;
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
$response=curl_exec($ch);
curl_close($ch);
if ($response > $banOnProability) {
return true;
} else {
if ($response < 0 || strcmp($response, "") == 0 ) {
//The server returned an error, you might want to do something
//like write to a log file or email yourself
//This could be true due to an invalid input or you've exceeded
//the number of allowed queries. Figure out why this is happening
//because you aren't protected by the system anymore
//Leaving this section blank is dangerous because you assume
//that you're still protected, which is incorrect
//and you might think GetIPIntel isn't accurate anymore
//which is also incorrect.
//failure to implement error handling is bad for the both of us
}
return false;
}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
?>
Here's a website to check if your faucet is still vulnerable. http://boomproxy.com/SecondOn funcaptcha's website edit you captcha, on the "security" tab select "always enhanced". Click save, then wait 5-10 minutes. Your captcha will now be alot harder for bots to bypass. I hope this helps other faucet owners, as it's terrible how bots think they can steal our valuable satoshis :3 You try and be nice, by giving people free bitcoins and they feel the need to exploit it. just so you know this site says im on a proxy and im not . So this is deferring real people too . |
|
|
|
|
thefaucetrunner
Sr. Member
Offline
Activity: 714
Merit: 250
Defend Bitcoin and its PoW: bitcoincleanup.com
|
|
October 27, 2015, 04:55:22 AM |
|
GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.
Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.
For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.
Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 27, 2015, 12:32:03 PM |
|
GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.
Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.
For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.
Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.
As you said the best way to work with getIpIntel is caching the results and coding a counter to limit your requests daily. For me, the fight against the scammers and bots is teaching me many things. As you know I'm developing my own security system without need to use antibot links or anything like this. I think I am winning this battle for now... |
|
|
|
thefaucetrunner
Sr. Member
Offline
Activity: 714
Merit: 250
Defend Bitcoin and its PoW: bitcoincleanup.com
|
|
October 27, 2015, 05:42:22 PM |
|
One of the main things to remember with these bots is that they are using a script, which is fairly rigid. You can do several things to foil the bots, including switching your captcha randomly, implementing legitimate anti-bot math problems and buttons, thresholds for cashouts and other features.
Unfortunately for many of the users on here, these sort of features require knowledge or the money to hire someone with the knowledge. We are lucky to have people like Minifrij etc to help users.
I've made it my task in recent months to fight these bots where I can, but I think it's an uphill struggle most of the time. I have banned so many addresses today...
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 27, 2015, 09:09:34 PM |
|
One of the main things to remember with these bots is that they are using a script, which is fairly rigid. You can do several things to foil the bots, including switching your captcha randomly, implementing legitimate anti-bot math problems and buttons, thresholds for cashouts and other features.
Unfortunately for many of the users on here, these sort of features require knowledge or the money to hire someone with the knowledge. We are lucky to have people like Minifrij etc to help users.
I've made it my task in recent months to fight these bots where I can, but I think it's an uphill struggle most of the time. I have banned so many addresses today...
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim. My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...). This move should block a lot of bots (At leas the not customizable ones). I will study how to do this... |
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 27, 2015, 09:18:37 PM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. |
|
|
|
|
|
misterbit
|
|
October 27, 2015, 11:35:53 PM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. Hi, watch this, feel me good, only would have to adapt it. http://jsfiddle.net/Ztq83/Someone who knows how to do it please |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 28, 2015, 01:44:05 AM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. Hi, watch this, feel me good, only would have to adapt it. http://jsfiddle.net/Ztq83/Someone who knows how to do it please Yes. It seems good. But you should implement this making the field mandatory to the submit button. I need to study how to do this yet. Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown. However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail. I will take a look in the faucetbox script tomorrow... |
|
|
|
|
misterbit
|
|
October 28, 2015, 01:55:02 AM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. Hi, watch this, feel me good, only would have to adapt it. http://jsfiddle.net/Ztq83/Someone who knows how to do it please Yes. It seems good. But you should implement this making the field mandatory to the submit button. I need to study how to do this yet. Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown. However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail. I will take a look in the faucetbox script tomorrow... It would be great |
|
|
|
|
|
FaucetRank.com
|
|
October 28, 2015, 04:18:36 AM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. Hi, watch this, feel me good, only would have to adapt it. http://jsfiddle.net/Ztq83/Someone who knows how to do it please Yes. It seems good. But you should implement this making the field mandatory to the submit button. I need to study how to do this yet. Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown. However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail. I will take a look in the faucetbox script tomorrow... instead of hiding submit button disable it when captcha solved enable it. will it still fail ? can a bot post disabled button ? |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 28, 2015, 04:52:42 PM |
|
Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.
My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).
This move should block a lot of bots (At leas the not customizable ones).
I will study how to do this...
Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works. I will make a tutorial on this post as soon as I get home from work. Hi, watch this, feel me good, only would have to adapt it. http://jsfiddle.net/Ztq83/Someone who knows how to do it please Yes. It seems good. But you should implement this making the field mandatory to the submit button. I need to study how to do this yet. Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown. However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail. I will take a look in the faucetbox script tomorrow... instead of hiding submit button disable it when captcha solved enable it. will it still fail ? can a bot post disabled button ? Yes. I'm doing this. The button born as disabled. Te problem is that a bot can set it to enabled using a java script since the button is being loaded in the client side (HTML). A button generated by PHP code should solve this problem. But the faucetbox script is a mix of PHP and HTML unfortunately. |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
October 28, 2015, 04:57:42 PM |
|
A button generated by PHP code should solve this problem. But the faucetbox script is a mix of PHP and HTML unfortunately.
A button generated by PHP? How do you plan to get this to work without using any HTML? |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 28, 2015, 05:23:50 PM |
|
A button generated by PHP code should solve this problem. But the faucetbox script is a mix of PHP and HTML unfortunately.
A button generated by PHP? How do you plan to get this to work without using any HTML? Sorry... I said a miisleading thing. I am thinking about create the timer and the enable button fuction in PHP to replace javascript functions into the HTML, for example. |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
October 28, 2015, 05:56:04 PM |
|
Sorry... I said a miisleading thing.
I am thinking about create the timer and the enable button fuction in PHP to replace javascript functions into the HTML, for example.
I can see where you're coming from, but you cannot create things like timers in PHP. Since PHP is a server side language, it loads only once when the page first loads. If you would want to make a timer in PHP, you would have to somehow delay the loading of the page entirely. You could perhaps add some sort of verification on the PHP submit if you wanted. For example, create a PHP session variable of the time before the form, then compare it to the time after the submission of the form to be sure that it is at least your timer's length between asking for both pages. Something like this maybe: <?php
//Before submission
$_SESSION['preSubmissionTime'] = time();
//After submission
//Captcha checks here
if((time()-$_SESSION['preSubmissionTime']) >= 5){ //Assuming your timer is 5 seconds long
//Pay the user
}else{
die('You\'re submitting too fast');
}
?>
If you're going to do something like this though, I would suggest hiding the captcha as well as the claim button with the timer. This way, the user cannot solve the captcha and press enter before the claim button has been enabled, posting the form and making themselves look like a bot/a user cheating the system. I'm not sure how the above code would work in practice, though if you can see the logic behind it you could likely add it in yourself. |
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 28, 2015, 10:30:23 PM |
|
Finally winning the fight against bots! :') I have updated the original post with some helpful information.
|
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
October 28, 2015, 10:52:07 PM |
|
Just saying, if you're displaying the maths problems in plain text it is very easy for bots to get around. There's a reason that captchas are images of text rather than the plain words, similar to this. While bots can read images, it makes their life a lot harder if they are.
|
|
|
|
|
|
misterbit
|
|
October 28, 2015, 11:36:00 PM |
|
Just saying, if you're displaying the maths problems in plain text it is very easy for bots to get around. There's a reason that captchas are images of text rather than the plain words, similar to this. While bots can read images, it makes their life a lot harder if they are.
You're right, in the same article that is 2013 a young says of his weakness. Friend this not serve? do you know how to adapt it? http://jsfiddle.net/Ztq83/ |
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 12:06:04 AM |
|
Just saying, if you're displaying the maths problems in plain text it is very easy for bots to get around. There's a reason that captchas are images of text rather than the plain words, similar to this. While bots can read images, it makes their life a lot harder if they are.
In that case I'll have to make the numbers display as images, I'll update my tutorial once I do. Thanks for pointing out such a big flaw lol. You're right, in the same article that is 2013 a young says of his weakness. Friend this not serve? do you know how to adapt it? http://jsfiddle.net/Ztq83/So you want a confirmation dialog to appear before receiving the satoshi? Maybe I'll implement the math question on the popup?  |
|
|
|
|
|
misterbit
|
|
October 29, 2015, 12:34:15 AM |
|
Just saying, if you're displaying the maths problems in plain text it is very easy for bots to get around. There's a reason that captchas are images of text rather than the plain words, similar to this. While bots can read images, it makes their life a lot harder if they are.
In that case I'll have to make the numbers display as images, I'll update my tutorial once I do. Thanks for pointing out such a big flaw lol. You're right, in the same article that is 2013 a young says of his weakness. Friend this not serve? do you know how to adapt it? http://jsfiddle.net/Ztq83/So you want a confirmation dialog to appear before receiving the satoshi? Maybe I'll implement the math question on the popup? I don't know, I guess if he gives OK receives and if not then not. I have not much idea about the mechanism of the bots |
|
|
|
|
|
FaucetRank.com
|
|
October 29, 2015, 01:45:29 AM |
|
Hey guys got an idea  Instead of using anti bot links if you create a new captcha like click identical image. many Ptc site have this captcha. |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 01:58:16 AM |
|
Just saying, if you're displaying the maths problems in plain text it is very easy for bots to get around. There's a reason that captchas are images of text rather than the plain words, similar to this. While bots can read images, it makes their life a lot harder if they are.
Check out my faucet now, I'm using a image instead of text. Is that better? |
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
October 29, 2015, 02:17:47 AM |
|
Check out my faucet now, I'm using a image instead of text. Is that better?
If your faucet is bit-essence.com, I get a 403 Forbidden error trying to access. |
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 02:25:22 AM |
|
Check out my faucet now, I'm using a image instead of text. Is that better?
If your faucet is bit-essence.com, I get a 403 Forbidden error trying to access. How about now? :O |
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
October 29, 2015, 02:27:24 AM |
|
How about now? :O
Yeah, that seems to be fine. Just as long as the problem is not in plain text that a bot can just scrape you should be fine. |
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 29, 2015, 03:23:26 AM |
|
Check out my faucet now, I'm using a image instead of text. Is that better?
If your faucet is bit-essence.com, I get a 403 Forbidden error trying to access. Take a look in my faucet, please: bitcon-catcher.com/faucet Ate the page bottom there is a second simple captcha. I will improve it changing text/numbers to image or something better soon. My point now is about other problem. I would like to transform this captcha in a mandatory captcha as the first (funcaptcha). I mean if the visitor claim without solve that captcha the faucetbox script (PHP) won't send the reward and will return: missing parameters. How could I do that? Do you know how? |
|
|
|
|
ofirbeigel
|
|
October 29, 2015, 09:45:17 AM |
|
Step FourIn step four we will be adding a simple math question displayed as an image as a second captcha. Faucet users cannot claim their satoshi until the math question is solved. Download PHP captcha HERE extract it and add the "captcha" folder to your root directory. If you don't trust that download you can find the original HERE, it will require some configuring though. Now open your template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) paste the following code at the very top line above <!DOCTYPE html>: <?php session_start(); ?>
Paste the following code where you would like the equation to appear <img id="captcha" src="/captcha/securimage_show.php" alt="CAPTCHA Image" />
<br>
<a href="#" onclick="document.getElementById('captcha').src = '/captcha/securimage_show.php?' + Math.random(); return false">[ New Problem ]</a>
<br>
<br>
<input type="text" name="captcha_code" size="10" maxlength="6" />
<br>
<br>
Now you need to create a PHP document. I use a program called Notepad++, however any text editor will work. Create a new document, then paste in the following code: <?php>
include_once $_SERVER['DOCUMENT_ROOT'] . '/captcha/securimage.php';
$securimage = new Securimage();
if ($securimage->check($_POST['captcha_code']) == false) {
// the code was incorrect
// you should handle the error so that the form processor doesn't continue
// or you can use the following code if there is no validation or you do not know how
echo "I'm sorry but you have to answer the math question correctly!.<br /><br />";
echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator.";
exit;
}
?>
Keep the document open. Open your faucet index page, it will most likely be index.php in your ROOTDIRECTORY. (Not the template index.php) Now press CTRL+A and select everything and copy it. Go back to the document you were just making and paste it on the very bottom, underneath the ?> Now save the file as what ever you want, I called mine math.php. Go back to your faucet template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) search for the following: <form method="POST" class="form-horizontal" role="form">on that same line link your PHP file to it like so: <form action="math.php" method="POST" class="form-horizontal" role="form">
Now you should have a working math eqution that users have to answer correctly before using your faucet. 1. Where do I put the math.php file? 2. I implemented the file in the template directory but I can still claim the coins without solving the problem. Here's the website. |
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 12:55:24 PM |
|
The math.php file is essential, it's basically what checks to make sure the captcha is correct. Place it inside the root directory of your server.
|
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 01:59:39 PM |
|
Take a look in my faucet, please: bitcon-catcher.com/faucet
Ate the page bottom there is a second simple captcha. I will improve it changing text/numbers to image or something better soon.
My point now is about other problem.
I would like to transform this captcha in a mandatory captcha as the first (funcaptcha). I mean if the visitor claim without solve that captcha the faucetbox script (PHP) won't send the reward and will return: missing parameters.
How could I do that? Do you know how?
I checked your faucet, I really like it! The captcha is mandatory already, isn't it? |
|
|
|
|
|
ofirbeigel
|
|
October 29, 2015, 03:03:32 PM |
|
The math.php file is essential, it's basically what checks to make sure the captcha is correct. Place it inside the root directory of your server.
I placed it in the root folder but it still doesn't work. I'm able to get the coins without solving the math problem. |
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 03:47:17 PM
Last edit: October 29, 2015, 07:50:06 PM by AlexAce420 |
|
Here's what you currently have in your code:  I wasn't very clear in my original post, but <form method="POST" class="form-horizontal" role="form"> & <form action="math.php" method="POST" class="form-horizontal" role="form"> Are supposed to be on the same line Just delete the first one, you should be fine. Currently your form is only applying the POST method, and ignoring your second line with the math.php action. |
|
|
|
|
|
ofirbeigel
|
|
October 29, 2015, 05:00:56 PM |
|
Here's what you currently have in your code: I wasn't very clear in my original post, but <form action="math.php" method="POST" class="form-horizontal" role="form"> & <form method="POST" class="form-horizontal" role="form"> Are supposed to be on the same line Just delete the second one, you should be fine. Currently your form is only applying the POST method, and ignoring your second line with the math.php action. Thanks for clarifying this, unfortunately now I get an invalid answer page even when I answer correctly. |
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 29, 2015, 05:12:27 PM
Last edit: October 29, 2015, 07:51:28 PM by AlexAce420 |
|
Make sure your math.php file looks like THIS. Also, you deleted the wrong one. Delete: <form method="POST" class="form-horizontal" role="form"> and use: <form action="math.php" method="POST" class="form-horizontal" role="form">
|
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 29, 2015, 05:18:37 PM |
|
Take a look in my faucet, please: bitcon-catcher.com/faucet
Ate the page bottom there is a second simple captcha. I will improve it changing text/numbers to image or something better soon.
My point now is about other problem.
I would like to transform this captcha in a mandatory captcha as the first (funcaptcha). I mean if the visitor claim without solve that captcha the faucetbox script (PHP) won't send the reward and will return: missing parameters.
How could I do that? Do you know how?
I checked your faucet, I really like it! The captcha is mandatory already, isn't it? So so... Hehehe... The second captcha is "mandatory" but coun be broken altering the javascript through a firefox tool/plugin. But this is working fine for now. Soon I will improve it. |
|
|
|
|
misterbit
|
|
October 29, 2015, 10:08:44 PM |
|
Thank you very much, now fits image |
|
|
|
|
|
misterbit
|
|
October 30, 2015, 03:22:04 AM |
|
I think it would be good that instead of opening a page with the notice of I'm sorry but you have to answer the math question correctly!. It was for example a popup |
|
|
|
|
pickupcoin
Legendary
Offline
Activity: 1203
Merit: 1000
|
|
November 07, 2015, 09:53:40 PM |
|
hm. thank for this share. i try to put math step on faucet, but have two erorrs first i have line: Notice: A session had already been started - ignoring session_start() in /home/domains/domain.com/public_html/faucet/templates/default/index.php on line 1this is 1 line: <?php session_start(); ?> and second: I'm sorry but you have to answer the math question correctly!. Please go back and use a caculator.but i am 100% sure to answer coorect math problem any idea where i am wrong? regards |
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
November 07, 2015, 09:57:26 PM |
|
hm. thank for this share. i try to put math step on faucet, but have two erorrs first i have line: Notice: A session had already been started - ignoring session_start() in /home/domains/domain.com/public_html/faucet/templates/default/index.php on line 1this is 1 line: <?php session_start(); ?> I'm unsure what the second problem is, though you do not need that line. FaucetBox starts a session on it's own, so you can just remove/comment out that session_start(); |
|
|
|
|
pickupcoin
Legendary
Offline
Activity: 1203
Merit: 1000
|
|
November 07, 2015, 10:09:40 PM |
|
hm. thank for this share. i try to put math step on faucet, but have two erorrs first i have line: Notice: A session had already been started - ignoring session_start() in /home/domains/domain.com/public_html/faucet/templates/default/index.php on line 1this is 1 line: <?php session_start(); ?> I'm unsure what the second problem is, though you do not need that line. FaucetBox starts a session on it's own, so you can just remove/comment out that session_start(); yes, you're right for this, seems that is not need that line. thanks but still problem with answer the math question correctly!. |
|
|
|
|
|
ofirbeigel
|
|
November 08, 2015, 07:06:02 AM |
|
hm. thank for this share. i try to put math step on faucet, but have two erorrs first i have line: Notice: A session had already been started - ignoring session_start() in /home/domains/domain.com/public_html/faucet/templates/default/index.php on line 1this is 1 line: <?php session_start(); ?> I'm unsure what the second problem is, though you do not need that line. FaucetBox starts a session on it's own, so you can just remove/comment out that session_start(); yes, you're right for this, seems that is not need that line. thanks but still problem with answer the math question correctly!.I get that a lot as well (the second problem). I answer the math question correctly but it still tells me that I'm wrong. |
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
pickupcoin
Legendary
Offline
Activity: 1203
Merit: 1000
|
|
November 13, 2015, 06:57:54 PM |
|
i am remove math captcha from my faucet, i do not solve problem with correctly math question
I would like to hear some idea with double captcha, definitely bots passing by funcaptcha.
does anyone have experience with solvemedia vs. funcaptcha, who's better?
|
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
November 13, 2015, 07:56:37 PM |
|
does anyone have experience with solvemedia vs. funcaptcha, who's better?
Unless SolveMedia has suddenly upped their security tenfold, FunCaptcha is almost certainly better. SolveMedia is flawed in that all that's needed to complete it is for the user to input text, which can be fairly easy for a bot to solve with some human assistance. |
|
|
|
|
|
elson
|
|
November 14, 2015, 01:15:27 AM |
|
can you explain who to open the math chapacha in a new popup window like your site ?
|
|
|
|
|
|
dart vader
|
|
November 14, 2015, 08:02:29 AM |
|
your site just shows a blank page to me.
of course im not behind any proxy.
i was thinking using your steps but im worried of blocking real people (or people not behind proxies).
|
|
|
|
|
|
FaucetRank.com
|
|
November 14, 2015, 12:41:30 PM |
|
i am remove math captcha from my faucet, i do not solve problem with correctly math question
I would like to hear some idea with double captcha, definitely bots passing by funcaptcha.
does anyone have experience with solvemedia vs. funcaptcha, who's better?
You can do it . 1st captcha at login page 2nd captcha when user make a claim |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
misterbit
|
|
November 14, 2015, 01:37:08 PM |
|
i am remove math captcha from my faucet, i do not solve problem with correctly math question
I would like to hear some idea with double captcha, definitely bots passing by funcaptcha.
does anyone have experience with solvemedia vs. funcaptcha, who's better?
You can do it . 1st captcha at login page 2nd captcha when user make a claim Hi, how do the captcha on login? |
|
|
|
|
|
thinkinger
|
|
November 22, 2015, 10:18:25 PM |
|
(ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) i couldnt understand that. where is it in paytoshi script. can anyone help me? |
|
|
|
pickupcoin
Legendary
Offline
Activity: 1203
Merit: 1000
|
|
November 22, 2015, 11:18:10 PM |
|
(ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) i couldnt understand that. where is it in paytoshi script. can anyone help me? this YOURTEMPLATE if you don't change anything is probably "default" like this ../faucet/templates/default/index.php |
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
November 22, 2015, 11:28:43 PM |
|
this YOURTEMPLATE if you don't change anything is probably "default"
like this ../faucet/templates/default/index.php
He isn't asking about FaucetBox, please read his post. Paytoshi is a bit different. Since the Paytoshi script is a bit more split up into how it does things, the file that you're looking for is probably at this path: ../themes/default/index.html.twigThe other files are aptly named for what they do, though index.html.twig is likely the one you want for editing the main body of your faucet. |
|
|
|
|
pickupcoin
Legendary
Offline
Activity: 1203
Merit: 1000
|
|
November 22, 2015, 11:40:54 PM |
|
this YOURTEMPLATE if you don't change anything is probably "default"
like this ../faucet/templates/default/index.php
He isn't asking about FaucetBox, please read his post. Paytoshi is a bit different. Since the Paytoshi script is a bit more split up into how it does things, the file that you're looking for is probably at this path: ../themes/default/index.html.twigThe other files are aptly named for what they do, though index.html.twig is likely the one you want for editing the main body of your faucet. I worked a long time ago with paytoshi, I completely forgot for .html.twig files. |
|
|
|
|
|
thinkinger
|
|
November 23, 2015, 04:32:28 PM |
|
this YOURTEMPLATE if you don't change anything is probably "default"
like this ../faucet/templates/default/index.php
He isn't asking about FaucetBox, please read his post. Paytoshi is a bit different. Since the Paytoshi script is a bit more split up into how it does things, the file that you're looking for is probably at this path: ../themes/default/index.html.twigThe other files are aptly named for what they do, though index.html.twig is likely the one you want for editing the main body of your faucet. Thanx bros. as soon as paytoshi works ill try it.and write here what happened. |
|
|
|
|
Jacce
|
|
November 23, 2015, 05:27:14 PM |
|
So the "proxy check" only checks if you can connect to port 80 or not? That is a very bad solution, not only is the possibility of false positives high (I got rejected from one faucet site just because I run a local WampServer), but what about proxies using other ports?
Edit: I saw that you also used Getipintel. Still, the chance of having false positives is high.
|
|
|
|
|
|
thinkinger
|
|
November 24, 2015, 06:19:08 PM |
|
sorry bros again me. i did the first step and how can i learn that i did true. second where do ı have to paste the fourth one in Paytoshi. and also if you want to smile a while you can go to my faucet to see how i made it.this way http://stonefaucet.esy.es/ just below the head. In step four we will be adding a simple math question displayed as an image as a second captcha. Faucet users cannot claim their satoshi until the math question is solved. Download PHP captcha HERE extract it and add the "captcha" folder to your root directory. If you don't trust that download you can find the original HERE, it will require some configuring though. Now open your template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) paste the following code at the very top line above <!DOCTYPE html>: <?php session_start(); ?>
Paste the following code where you would like the equation to appear <img id="captcha" src="/captcha/securimage_show.php" alt="CAPTCHA Image" />
<br>
<a href="#" onclick="document.getElementById('captcha').src = '/captcha/securimage_show.php?' + Math.random(); return false">[ New Problem ]</a>
<br>
<br>[/quote]
<input type="text" name="captcha_code" size="10" maxlength="6" />
<br>
<br>
Now you need to create a PHP document. I use a program called Notepad++, however any text editor will work. Create a new document, then paste in the following code: <?php>
include_once $_SERVER['DOCUMENT_ROOT'] . '/captcha/securimage.php';
$securimage = new Securimage();
if ($securimage->check($_POST['captcha_code']) == false) {
// the code was incorrect
// you should handle the error so that the form processor doesn't continue
// or you can use the following code if there is no validation or you do not know how
echo "I'm sorry but you have to answer the math question correctly!.<br /><br />";
echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator.";
exit;
}
?>
Keep the document open. Open your faucet index page, it will most likely be index.php in your ROOTDIRECTORY. (Not the template index.php) Now press CTRL+A and select everything and copy it. Go back to the document you were just making and paste it on the very bottom, underneath the ?> Now save the file as what ever you want, I called mine math.php. Go back to your faucet template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) search for the following: <form method="POST" class="form-horizontal" role="form">on that same line link your PHP file to it like so: <form action="math.php" method="POST" class="form-horizontal" role="form">
Now you should have a working math eqution that users have to answer correctly before using your faucet.
I hope this helps other faucet owners, as it's terrible how bots think they can steal our valuable satoshis :3 You try and be nice, by giving people free bitcoins and they feel the need to exploit it. |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
November 24, 2015, 07:13:28 PM |
|
sorry bros again me. i did the first step and how can i learn that i did true. second where do ı have to paste the fourth one in Paytoshi. and also if you want to smile a while you can go to my faucet to see how i made it.this way http://stonefaucet.esy.es/ just below the head. No problem, we're here to help. AFAIK you paste the fourth block of code on themes/default/index.html.twig at around line 30, though the script wasn't built for Paytoshi so I'm not sure the outcome will be. You also seem to have some PHP showing on your faucet. You should probably try to fix that. |
|
|
|
|
|
thinkinger
|
|
November 24, 2015, 07:46:46 PM |
|
sorry bros again me. i did the first step and how can i learn that i did true. second where do ı have to paste the fourth one in Paytoshi. and also if you want to smile a while you can go to my faucet to see how i made it.this way http://stonefaucet.esy.es/ just below the head. No problem, we're here to help. AFAIK you paste the fourth block of code on themes/default/index.html.twig at around line 30, though the script wasn't built for Paytoshi so I'm not sure the outcome will be. You also seem to have some PHP showing on your faucet. You should probably try to fix that. hi i pasted it and it ended like that.some scripts that can be seen by visitors.here is themes/default/index.html.twig as pasted.can anyone tell me where to paste it? {% extends "default/layout.html.twig" %} {% block content %} <section class="container"> <h1 class="text-center title">{{ name|default('Paytoshi Faucet') }}</h1> <h3 class="text-center headline">{{ description|default('...faucet? Paytoshi!') }}</h3> <hr /> <div class="custom-content"> {{ content.header_box|raw }} </div> <hr /> <?php if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1)) die("It would apprear you're using a proxy, so please, go fuck yourself!"); function checkProxy($ip){ $contactEmail="EMAIL"; $timeout=3; $banOnProability=0.99; $ch = curl_init(); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_TIMEOUT, $timeout); curl_setopt($ch, CURLOPT_URL, " http://check.getipintel.net/check.php?ip=$ip"); $response=curl_exec($ch); curl_close($ch); if ($response > $banOnProability) { return true; } else { if ($response < 0 || strcmp($response, "") == 0 ) { //The server returned an error, you might want to do something //like write to a log file or email yourself //This could be true due to an invalid input or you've exceeded //the number of allowed queries. Figure out why this is happening //because you aren't protected by the system anymore //Leaving this section blank is dangerous because you assume //that you're still protected, which is incorrect //and you might think GetIPIntel isn't accurate anymore //which is also incorrect. //failure to implement error handling is bad for the both of us } return false; } } $ip=$_SERVER['REMOTE_ADDR']; if (checkProxy($ip)) { echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />"; } ?> <div class="row"> <div class="col-md-3 hidden-xs hidden-sm custom-content"> {{ content.left_box|raw }} </div> <div class="col-md-6 col-sm-12"> <div class="faucet"> {% include "default/alerts.html.twig" %} <h3 class="text-center">Rewards:</h3> <ul class="reward-list text-center"> {% for reward in rewards %} <li class="reward">{{ reward.amount }} satoshi ({{ reward.probability }}%)</li> {% endfor %} </ul> <h4 class="text-center">Get a reward every {{ waiting_interval / 60 }} mins!</h4> <hr> <form action="{{ urlFor('reward') }}" novalidate="novalidate" method="POST" class="form"> <div class="form-group"> <input class="form-control input-lg" type="text" name="address" value="{% if address is defined %}{{ address }}{% endif %}" placeholder="Enter your Bitcoin address"> </div> <div class="custom-content"> {{ content.center1_box|raw }} </div> <div class="form-group captcha"> <center> {% include "default/" ~ captcha.name ~ ".html.twig" with { server: captcha.server, public_key: captcha.public_key } %} </center> </div> <div class="custom-content"> {{ content.center2_box|raw }} </div> <button class="form-control input-lg btn-info get-reward">Get a reward!</button> <input type="hidden" name="referral" value="{{ referral }}"> <div class="custom-content"> {{ content.center3_box|raw }} </div> </form> <div class="well well-sm text-center referral-box">Earn {{ referral_percentage }}% referral bonus! Share your referral URL:<br>{{ base_url ~ '?r=' ~ address|default('Bitcoin Address') }}</div> </div> <div class="text-center"> <h3>What is a Bitcoin Faucet?</h3> <p> A faucet is a FREE Bitcoin site paying out up to {{ rewards_max }} satoshi every hour. Each time you visit this page and complete the captcha you will receive a payout amount randomly selected from the available amounts shown above. You will receive your payment directly to your <a href=" https://paytoshi.org">Paytoshi wallet.</a><br/> <a href="{{ urlFor('faq') }}">Read more</a> </p> </div> </div> <div class="col-md-3 hidden-xs hidden-sm "> <div class="custom-content"> {{ content.right_box|raw }} </div> </div> </div> <div class="row"> <div class="col-md-12 custom-content" > {{ content.footer_box|raw }} </div> </div> </section> {% endblock %} |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
November 24, 2015, 08:17:20 PM |
|
hi i pasted it and it ended like that.some scripts that can be seen by visitors.here is themes/default/index.html.twig as pasted.can anyone tell me where to paste it? snip
Replace this line: <form action="{{ urlFor('reward') }}" novalidate="novalidate" method="POST" class="form">Also, try putting your PHP codes in the head in the file layout.html.twig. It's not that great practice to put them in the body imo. |
|
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
November 26, 2015, 02:50:31 PM |
|
can you show the code how you added the math question in a second frame |
|
|
|
|
|
BrannigansLaw
|
|
November 30, 2015, 02:13:28 PM |
|
Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
Does this replace: RewriteEngine on RewriteCond %{HTTP:VIA} !^$ [OR] RewriteCond %{HTTP:FORWARDED} !^$ [OR] RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR] RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR] RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR] RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ RewriteRule .* - [F] ? thank you all! Such great tips here |
|
|
|
|
|
misterbit
|
|
November 30, 2015, 02:21:22 PM |
|
Thus more complete # Block Proxy
#5
RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARDED_FOR} !^$ [OR]
#5
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARDED_FOR} !^$ [OR]
#4
RewriteCond %{HTTP:X_HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_ID} !^$ [OR]
#4
RewriteCond %{HTTP:FORWARDED_HTTP_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:X_XROXY_ID} !^$ [OR]
#3
RewriteCond %{HTTP:CLIENT_HTTP_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_HTTP_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_ID} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION} !^$ [OR]
#2
RewriteCond %{HTTP:X_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:X_PROXY} !^$ [OR]
RewriteCond %{HTTP:X_XPROXY} !^$ [OR]
RewriteCond %{HTTP:X_XROXY} !^$ [OR]
#2
RewriteCond %{HTTP:CLIENT_IP} !^$ [OR]
RewriteCond %{HTTP:FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARDED} !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA} !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY} !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY} !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:PROXY_ID} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_ID} !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XROXY_ID} !^$ [OR]
#1
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:PROXY} !^$ [OR]
RewriteCond %{HTTP:USERAGENT} !^$ [OR]
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:XPROXY} !^$ [OR]
RewriteCond %{HTTP:XROXY} !^$ [OR]
RewriteRule ^(.*)$ – [F]
Does this replace: RewriteEngine on RewriteCond %{HTTP:VIA} !^$ [OR] RewriteCond %{HTTP:FORWARDED} !^$ [OR] RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR] RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR] RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR] RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ RewriteRule .* - [F] ? thank you all! Such great tips here Yes friend. |
|
|
|
|
|
BrannigansLaw
|
|
November 30, 2015, 03:51:00 PM |
|
Thank you for clearing that up misterbit 1 problem, I used to get the "It would apprear you're using a proxy, so please, go fuck yourself" but no longer do when checking via boomproxy.com. I no longer do, even after updating .htaccess. Could someone double check for me and see if you can use my faucet and successfully get satoshi via boomproxy.com? Its faucetfm.com I don't get the message ""It would apprear you're using a proxy, so please, go fuck yourself"" but I cannot click the "I'm not a bot" links also, so perhaps it is working in a way? I tried again with unticking all the boxes 'Remove Scripts' etc and it had the same result. |
|
|
|
|
|
misterbit
|
|
November 30, 2015, 04:28:59 PM |
|
Thank you for clearing that up misterbit 1 problem, I used to get the "It would apprear you're using a proxy, so please, go fuck yourself" but no longer do when checking via boomproxy.com. I no longer do, even after updating .htaccess. Could someone double check for me and see if you can use my faucet and successfully get satoshi via boomproxy.com? Its faucetfm.com I don't get the message ""It would apprear you're using a proxy, so please, go fuck yourself"" but I cannot click the "I'm not a bot" links also, so perhaps it is working in a way? I tried again with unticking all the boxes 'Remove Scripts' etc and it had the same result. Unfortunately I don't speak English and use the translator who is not very coherent. This code unfortunately does not detect all the proxies, apart from that there are hundreds of people who use servers it's the biggest problem |
|
|
|
|
bargain
Newbie
Offline
Activity: 24
Merit: 0
|
|
November 30, 2015, 04:37:03 PM |
|
OptionalI have google analytics on my faucet and I realized that, almost all the traffic was coming from Russia or China.... So I found out about this site called http://www.blockacountry.com, it allows you to block whole countries from accessing your website. This route is optional, but super effective. The only downside is it affects real people from accessing your faucet. THAT IS KNOW AS DISCIMINATION! Don't use that, you will face legal issues! For stopping people from earning as you are blocking an entier countrie's IPs from accessing a site and free money (if it is a faucet)! |
|
|
|
|
|
FaucetRank.com
|
|
November 30, 2015, 04:53:29 PM |
|
Thank you for clearing that up misterbit 1 problem, I used to get the "It would apprear you're using a proxy, so please, go fuck yourself" but no longer do when checking via boomproxy.com. I no longer do, even after updating .htaccess. Could someone double check for me and see if you can use my faucet and successfully get satoshi via boomproxy.com? Its faucetfm.com I don't get the message ""It would apprear you're using a proxy, so please, go fuck yourself"" but I cannot click the "I'm not a bot" links also, so perhaps it is working in a way? I tried again with unticking all the boxes 'Remove Scripts' etc and it had the same result. Unfortunately I don't speak English and use the translator who is not very coherent. This code unfortunately does not detect all the proxies, apart from that there are hundreds of people who use servers it's the biggest problem you can't stop 100% proxy users . |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
FBCTorg
|
|
December 01, 2015, 12:44:05 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
|
|
|
|
|
misterbit
|
|
December 01, 2015, 12:51:43 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS |
|
|
|
|
|
FBCTorg
|
|
December 01, 2015, 12:55:21 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap |
|
|
|
|
misterbit
|
|
December 01, 2015, 01:02:36 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap One moment... |
|
|
|
|
|
misterbit
|
|
December 01, 2015, 01:06:49 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap One moment... the range I think it is 158.69. |
|
|
|
|
|
FBCTorg
|
|
December 01, 2015, 01:18:48 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap One moment... the range I think it is 158.69. i see visits from 158.69.103.193/194/197/199/201/202/213/214/215/216/217/218/219/221 same ref and same machine: Browser: Firefox 37.0 OS: Linux Resolution: 2048x1536 i blocked all 158.69.103.0/24 now it appeared with new IPs: Location: Montréal, Quebec, Canada IP Address: Ovh Hosting (167.114.180.179) [Label IP Address] Referring URL: (No referring link) Entry Page: freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK Latest Page: freebitcoindice.com/faucetboxgame/ Browser: Firefox 38.0 OS: Linux Resolution: 2048x1536 same machine |
|
|
|
|
misterbit
|
|
December 01, 2015, 01:30:47 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap One moment... the range I think it is 158.69. i see visits from 158.69.103.193/194/197/199/201/202/213/214/215/216/217/218/219/221 same ref and same machine: Browser: Firefox 37.0 OS: Linux Resolution: 2048x1536 i blocked all 158.69.103.0/24 now it appeared with new IPs: Location: Montréal, Quebec, Canada IP Address: Ovh Hosting (167.114.180.179) [Label IP Address] Referring URL: (No referring link) Entry Page: freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK Latest Page: freebitcoindice.com/faucetboxgame/ Browser: Firefox 38.0 OS: Linux Resolution: 2048x1536 same machine |
|
|
|
|
|
misterbit
|
|
December 01, 2015, 01:43:06 AM |
|
just blocked a bot using 158.69.103. range
Location:
Lake Forest, California, United States
IP Address:
Sparta Inc. Aeso (158.69.103.219) [Label IP Address]
Referring URL:
(No referring link)
Visit Page:
freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK
OVH SAS yes, it uses same ref addy, same os, browser,.etc but different IPs on that range. block it asap One moment... the range I think it is 158.69. i see visits from 158.69.103.193/194/197/199/201/202/213/214/215/216/217/218/219/221 same ref and same machine: Browser: Firefox 37.0 OS: Linux Resolution: 2048x1536 i blocked all 158.69.103.0/24 now it appeared with new IPs: Location: Montréal, Quebec, Canada IP Address: Ovh Hosting (167.114.180.179) [Label IP Address] Referring URL: (No referring link) Entry Page: freebitcoindice.com/faucetbox/?ref=1HCVQXXvhEWtU5URbXDSDD441i1agpnwkK Latest Page: freebitcoindice.com/faucetboxgame/ Browser: Firefox 38.0 OS: Linux Resolution: 2048x1536 same machine And that is not all friend, there are hundreds and hundreds of servers  |
|
|
|
|
|
FBCTorg
|
|
December 01, 2015, 01:58:27 AM |
|
i see is there any way to block all hosting company IPs, is such service out there? edit: i mean like database of IP ranges of hosting providers |
|
|
|
|
misterbit
|
|
December 01, 2015, 02:01:34 AM |
|
i see is there any way to block all hosting company IPs, is such service out there? It is very complicated, it would be to search for a pattern in the data base |
|
|
|
|
|
FBCTorg
|
|
December 01, 2015, 03:09:24 AM |
|
i see is there any way to block all hosting company IPs, is such service out there? It is very complicated, it would be to search for a pattern in the data base i could find websites with such databases and also some requests for such service on other forums, proxy or script filtering those IPs would be handy for many people not only faucets |
|
|
|
|
FaucetRank.com
|
|
December 01, 2015, 02:30:08 PM |
|
The better solution is reduce claim timers . Faucet owner put high timers and high rewards but its very risky because users get enough time to multiclaim.
You can't imagine how many lazy faucetors are in this world who don't bother to visit other faucets and makes multiple claims on single faucet.That's why bitcoinker has 15 mins timer.
|
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
December 01, 2015, 05:32:57 PM |
|
can you show the code how you added the math question in a second frame can someone show me the code to open a frame in the same window to put there the math question ? kind regrads |
|
|
|
|
|
BrannigansLaw
|
|
December 07, 2015, 07:58:12 PM |
|
Anyone know how to add 2 captchas? I thought I might as well ad recaptcha on top of funcaptcha as it's so easy to complete and should help.
|
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
December 07, 2015, 08:03:46 PM |
|
Anyone know how to add 2 captchas? I thought I might as well ad recaptcha on top of funcaptcha as it's so easy to complete and should help.
I went through the basics on where to put the confirmation code here, if you know how to code in PHP it shouldn't be too difficult to add the captcha yourself with this info I don't think. If not I can try and make a more in-depth post about it. |
|
|
|
|
|
BrannigansLaw
|
|
December 07, 2015, 08:06:23 PM |
|
Anyone know how to add 2 captchas? I thought I might as well ad recaptcha on top of funcaptcha as it's so easy to complete and should help.
I went through the basics on where to put the confirmation code here, if you know how to code in PHP it shouldn't be too difficult to add the captcha yourself with this info I don't think. If not I can try and make a more in-depth post about it. Yes! I was looking for this, I knew someone posted somewhere but couldn't find it. Cheers for posting, I should be ok |
|
|
|
|
|
thinkinger
|
|
December 07, 2015, 08:23:35 PM |
|
Anyone know how to add 2 captchas? I thought I might as well ad recaptcha on top of funcaptcha as it's so easy to complete and should help.
I went through the basics on where to put the confirmation code here, if you know how to code in PHP it shouldn't be too difficult to add the captcha yourself with this info I don't think. If not I can try and make a more in-depth post about it. bro. a more in-depth explanation will be fine for me. if you do ,it will be appreciated by me thanx. By the way a guy from russia said that he cant use my faucet, im not sure but can it be he is using proxy or sth else and i did anti-bot scrypt right placed? |
|
|
|
BitcoinFX
Legendary
Offline
Activity: 2646
Merit: 1720
https://youtu.be/DsAVx0u9Cw4 ... Dr. WHO < KLF
|
|
December 07, 2015, 11:20:33 PM |
|
i see is there any way to block all hosting company IPs, is such service out there? It is very complicated, it would be to search for a pattern in the data base i could find websites with such databases and also some requests for such service on other forums, proxy or script filtering those IPs would be handy for many people not only faucets Herewith, a list I posted in the faucetbox thread for ' Not an access provider or ISP' - https://bitcointalk.org/index.php?topic=1094930.msg13125867#msg13125867Also, a mod. for the Bad-Behavior Anti-SPAM script, which is quite effective if you get a free httpbl_key . - https://bitcointalk.org/index.php?topic=1094930.msg13122044#msg13122044 |
|
|
|
Klarck
Member
Offline
Activity: 67
Merit: 10
In Crypto We Trust
|
|
December 08, 2015, 12:26:14 AM |
|
Can any1 confirm if this actually stop people from acessing your faucet using Tor?
|
Freedom is being you without anyone's permission.
|
|
|
Klarck
Member
Offline
Activity: 67
Merit: 10
In Crypto We Trust
|
|
December 08, 2015, 04:07:25 AM
Last edit: December 08, 2015, 04:22:28 AM by Klarck |
|
PSA!!!Guys, there's something very important you need to know before you proceed. I had to make the .htaccess file myself bc my website didn't have one, but when i uploaded it i fucking lost access to my website!!! I had to use a VPN to check if the site was still working and it was. Then i fixed it by adding the following code to the top of the file created by this site: <ifModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTP:VIA} !^$ [OR] RewriteCond %{HTTP:FORWARDED} !^$ [OR] RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR] RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR] RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR] RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ RewriteRule .* - [F] </ifModule> I'm just saying that bc the site mentioned by OP only makes the code that goes below that one above, so it looks like this: Order Deny,Allow Deny from 1.169.204.75 Deny from 103.10.197.50 Deny from 103.236.201.110 Deny from 103.240.91.7... when it should actually look like this: <ifModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTP:VIA} !^$ [OR] RewriteCond %{HTTP:FORWARDED} !^$ [OR] RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR] RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR] RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR] RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR] RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$ RewriteRule .* - [F] </ifModule> Order Deny,Allow Deny from 1.169.204.75 Deny from 103.10.197.50 Deny from 103.236.201.110 Deny from 103.240.91.7 Deny from 103.3.61.158... So in case it happens to you, don't worry, just add the line code to the file and upload it again. BTW i must thank OP bc only the step 1 already seems to do some work, when i try to acess my faucet via Tor now it says: "Forbidden You don't have permission to access / on this server. Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request." OP = Nice guy 
|
Freedom is being you without anyone's permission.
|
|
|
BitcoinFX
Legendary
Offline
Activity: 2646
Merit: 1720
https://youtu.be/DsAVx0u9Cw4 ... Dr. WHO < KLF
|
|
December 08, 2015, 05:40:48 PM |
|
Yes. Incorrect formatting of .htaccess rules can easily (and incorrectly) block access to your entire website. The correct .htaccess rules for blocking proxies can be found in this 'legendary' blog (probably the source); - https://perishablepress.com/block-tough-proxies/Also, this message might actually be considered a bit more user friendly; "Sorry. Proxy access is not allowed. If you are not using a proxy please contact EMAIL with your IP address" I recommend using the Bad-Behavior script, which actually covers a lot of the rules in the G5 and G6 firewall from the above blog anyway. Most of the rules in BB actually became the Mod Security base. The modified script for BB I posted was 'cobbled' together from reviewing several (now outdated) .htaccess lists and comparing user agents with activity at http://botsvsbrowsers.com/ and https://udger.com/- https://bitcointalk.org/index.php?topic=1094930.msg13184663#msg13184663Good job OP for starting this thread! |
|
|
|
pinger
Legendary
Offline
Activity: 1512
Merit: 1001
Bitcoin - Resistance is futile
|
|
December 08, 2015, 10:26:22 PM |
|
Yes. Incorrect formatting of .htaccess rules can easily (and incorrectly) block access to your entire website. The correct .htaccess rules for blocking proxies can be found in this 'legendary' blog (probably the source); - https://perishablepress.com/block-tough-proxies/Also, this message might actually be considered a bit more user friendly; "Sorry. Proxy access is not allowed. If you are not using a proxy please contact EMAIL with your IP address" I recommend using the Bad-Behavior script, which actually covers a lot of the rules in the G5 and G6 firewall from the above blog anyway. Most of the rules in BB actually became the Mod Security base. The modified script for BB I posted was 'cobbled' together from reviewing several (now outdated) .htaccess lists and comparing user agents with activity at http://botsvsbrowsers.com/ and https://udger.com/- https://bitcointalk.org/index.php?topic=1094930.msg13184663#msg13184663Good job OP for starting this thread! This can be useful for the site I was developing, thanks all of you people that create and collaborate in this thread. |
For rent
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
December 10, 2015, 07:05:05 PM |
|
bro. a more in-depth explanation will be fine for me. if you do ,it will be appreciated by me thanx.
Sorry about the delay, something like this should work (on a default config). You obviously need the recaptcha keys, which you can find here. Keep in mind that this will only work if you do not have recaptcha as a main captcha, and that recaptcha isn't the most secure in stopping bots. This code is also untested, so might need slight alterations. templates/default/index.php - line 11 (in the <head> tag): <script src='https://www.google.com/recaptcha/api.js'></script>
- line 175 (below the PHP which decides which captcha to use): <div class="text-center">
<div class="g-recaptcha" data-sitekey="SITE_KEY"></div>
</div>
- line 2200 (under the PHP which determines if the main captcha was correct): $data['captcha_valid_2'] = json_decode(file_get_contents('https://www.google.com/recaptcha/api/siteverify?secret=SECRET_KEY&response=' . $_POST['g-recaptcha-response']))->success;
- line 2249: if (array_key_exists('address', $_POST) &&
$data['captcha_valid'] &&
$data['captcha_valid_2'] &&
$data['enabled'] &&
$data['eligible']
) {
With this it should say the normal error whenever you get the captcha wrong, though probably won't be special. It should work at least though. |
|
|
|
|
matt007
Newbie
Offline
Activity: 54
Merit: 0
|
|
December 19, 2015, 10:06:01 PM
Last edit: December 19, 2015, 10:37:31 PM by matt007 |
|
Hi ! A big thanks to you for sharing this, i just got hacked and they stole about 2000000 satoshi from me. I have disabled my faucets before i can secure my faucets again. My faucets are all on Cloudflare, would you recommend any special configs with your script for cloudflare users ? Also, i have ZB block security script on them but this is not helping to block proxies. However, i think it's blocking TOR users well. So, using your security techniques in conjonction with Cloudflare and ZB Block ? Do you think it would be a good idea ? If yes, any special configs to make to make it work all together ? I was also thinking of installing this script instead of ZB BLOCK : http://codecanyon.net/item/safeguard-pro-ultimate-php-website-protection/6783181In final, what do you think would be the idea setup for me and what to avoid ? Thansk mate , i really appreciate your input or any other suggestions from other users because, if i can't make this work, i will have to close all my faucets Best regards, Mat |
|
|
|
|
pinger
Legendary
Offline
Activity: 1512
Merit: 1001
Bitcoin - Resistance is futile
|
|
December 19, 2015, 10:58:44 PM |
|
Hi ! A big thanks to you for sharing this, i just got hacked and they stole about 2000000 satoshi from me. I have disabled my faucets before i can secure my faucets again. My faucets are all on Cloudflare, would you recommend any special configs with your script for cloudflare users ? Also, i have ZB block security script on them but this is not helping to block proxies. However, i think it's blocking TOR users well. So, using your security techniques in conjonction with Cloudflare and ZB Block ? Do you think it would be a good idea ? If yes, any special configs to make to make it work all together ? I was also thinking of installing this script instead of ZB BLOCK : http://codecanyon.net/item/safeguard-pro-ultimate-php-website-protection/6783181In final, what do you think would be the idea setup for me and what to avoid ? Thansk mate , i really appreciate your input or any other suggestions from other users because, if i can't make this work, i will have to close all my faucets Best regards, Mat That looks interesting, how is this configured? I mean about codecanyon safeguard pro. |
For rent
|
|
|
matt007
Newbie
Offline
Activity: 54
Merit: 0
|
|
December 20, 2015, 11:33:31 AM |
|
Hi ! A big thanks to you for sharing this, i just got hacked and they stole about 2000000 satoshi from me. I have disabled my faucets before i can secure my faucets again. My faucets are all on Cloudflare, would you recommend any special configs with your script for cloudflare users ? Also, i have ZB block security script on them but this is not helping to block proxies. However, i think it's blocking TOR users well. So, using your security techniques in conjonction with Cloudflare and ZB Block ? Do you think it would be a good idea ? If yes, any special configs to make to make it work all together ? I was also thinking of installing this script instead of ZB BLOCK : http://codecanyon.net/item/safeguard-pro-ultimate-php-website-protection/6783181In final, what do you think would be the idea setup for me and what to avoid ? Thansk mate , i really appreciate your input or any other suggestions from other users because, if i can't make this work, i will have to close all my faucets Best regards, Mat That looks interesting, how is this configured? I mean about codecanyon safeguard pro. Yes, it looks good but i did not install it yet. I'm still in the process of choosing the best method. If i install Safeguard Pro, i'll get back to you with the details and follow up It's a php script and it has good reviews and ratings... |
|
|
|
|
|
misterbit
|
|
December 23, 2015, 04:43:49 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
|
|
|
|
|
|
|
pinger
Legendary
Offline
Activity: 1512
Merit: 1001
Bitcoin - Resistance is futile
|
|
December 23, 2015, 07:44:48 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results |
For rent
|
|
|
|
misterbit
|
|
December 23, 2015, 11:33:45 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. |
|
|
|
|
pinger
Legendary
Offline
Activity: 1512
Merit: 1001
Bitcoin - Resistance is futile
|
|
December 24, 2015, 08:51:36 AM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. There are a lot of bots doing nasty stuff all the time, so probably they are real but just bots. No way to know. You should consider to start a 24 h honeypot so you can see for real what is going on, is an interesting exercise. |
For rent
|
|
|
|
misterbit
|
|
December 24, 2015, 10:11:07 AM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. There are a lot of bots doing nasty stuff all the time, so probably they are real but just bots. No way to know. You should consider to start a 24 h honeypot so you can see for real what is going on, is an interesting exercise. OK, but I have no idea concerning the honeypot with 24 hours |
|
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
December 24, 2015, 12:51:40 PM |
|
can you show the code how you added the math question in a second frame can someone show me the code to open a frame in the same window to put there the math question ? kind regrads can someone show me the code to open a frame in the same window to put there the math question ? |
|
|
|
|
pinger
Legendary
Offline
Activity: 1512
Merit: 1001
Bitcoin - Resistance is futile
|
|
December 24, 2015, 02:38:22 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. There are a lot of bots doing nasty stuff all the time, so probably they are real but just bots. No way to know. You should consider to start a 24 h honeypot so you can see for real what is going on, is an interesting exercise. OK, but I have no idea concerning the honeypot with 24 hours |
For rent
|
|
|
|
misterbit
|
|
December 24, 2015, 02:48:14 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. There are a lot of bots doing nasty stuff all the time, so probably they are real but just bots. No way to know. You should consider to start a 24 h honeypot so you can see for real what is going on, is an interesting exercise. OK, but I have no idea concerning the honeypot with 24 hours Thanks a lot |
|
|
|
|
Butord
Member
Offline
Activity: 95
Merit: 10
|
|
January 01, 2016, 11:39:22 AM |
|
Hi,
The faucetbox script has Security tab where we can add list of IP addresses or IP networks in CIDR notation to ban and List of hostnames to ban. Is it the same as using .htaccess file? Thanks
|
|
|
|
|
myrfaucets
Member
Offline
Activity: 60
Merit: 10
|
|
January 01, 2016, 12:30:49 PM |
|
|
|
|
|
|
|
creepland
|
|
January 01, 2016, 02:01:53 PM |
|
Hi,
The faucetbox script has Security tab where we can add list of IP addresses or IP networks in CIDR notation to ban and List of hostnames to ban. Is it the same as using .htaccess file? Thanks
I think it's probably is the same. |
|
|
|
|
FaucetRank.com
|
|
January 01, 2016, 05:07:10 PM |
|
Yes. Incorrect formatting of .htaccess rules can easily (and incorrectly) block access to your entire website. The correct .htaccess rules for blocking proxies can be found in this 'legendary' blog (probably the source); - https://perishablepress.com/block-tough-proxies/Also, this message might actually be considered a bit more user friendly; "Sorry. Proxy access is not allowed. If you are not using a proxy please contact EMAIL with your IP address" I recommend using the Bad-Behavior script, which actually covers a lot of the rules in the G5 and G6 firewall from the above blog anyway. Most of the rules in BB actually became the Mod Security base. The modified script for BB I posted was 'cobbled' together from reviewing several (now outdated) .htaccess lists and comparing user agents with activity at http://botsvsbrowsers.com/ and https://udger.com/- https://bitcointalk.org/index.php?topic=1094930.msg13184663#msg13184663Good job OP for starting this thread! This is helpful for me but I would like to be more soft for proxy users instead of banning them I'll show them a message that sorry proxy user can't claim free btc . They will see this message when they solve captcha and hit submit button so this way proxy /Google bots are allowed to visit site but a proxy user trying to claim will get nothing except above message. |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
misterbit
|
|
January 01, 2016, 10:45:54 PM |
|
I bought the SafeGuard Pro script but don't know where it is effective, because now have 196 blocks.
4 Proxy/VPN
168 Spammer
24 SQL Injections
I do not understand SQL Injections locks I get details for example Query QsCpn0SFjonXqXb3bFVt22HyCv5OLQdQ05fo8D1Y1LAjt
No idea the truth
With SQL Injections, someone could have complete access to your database. Everything your database user can modify, the same privilegies have the attacker. So you can steal your db, bypass passwords, modify (get 1000 USD or 1000 BTC in your database, even if you have just 0 for real), even delete all the database. Pretty serious stuff.
http://www.unixwiz.net/techtips/sql-injection.htmlPlease test it as much as you can and tell us the results OK, by now I have 26 locks according to the plugin but the truth I do not know if they are real or not. Finally I do not recommend buying the script, programmer lies in features on separate ISP blocking also blocks fake attacks SQL with Bitcoin addresses and any url. |
|
|
|
|
uchijashisui
Newbie
Offline
Activity: 25
Merit: 0
|
|
January 05, 2016, 12:54:31 AM |
|
@AlexAce420 Just playing in my back up website... but the math questions does not load: http://i67.tinypic.com/mh7ziq.pngI just have done everthing ypu have told us: (include math in the root, adding the lines, etc.) |
|
|
|
|
|
KnightTrader
|
|
January 05, 2016, 03:41:53 PM |
|
@AlexAce420 Just playing in my back up website... but the math questions does not load:  I just have done everthing ypu have told us: (include math in the root, adding the lines, etc.) Got same error when tried this some time ago. This would be great to get working, because looks like it could be added to any faucet without modifying faucet code. |
|
|
|
|
|
BrannigansLaw
|
|
January 06, 2016, 11:39:09 AM |
|
@AlexAce420 Just playing in my back up website... but the math questions does not load: I just have done everthing ypu have told us: (include math in the root, adding the lines, etc.) Got same error when tried this some time ago. This would be great to get working, because looks like it could be added to any faucet without modifying faucet code. I had the same problem but managed to fix it. It's a directory issue. /libs/captcha/securimage_show.php - put that, the original code misses the libs section as shown below. <img id="captcha" src="/captcha/securimage_show.php" alt="CAPTCHA Image" /> <br> <a href="#" onclick="document.getElementById('captcha').src = '/captcha/securimage_show.php?' + Math.random(); return false">[ New Problem ]</a> |
|
|
|
|
|
KnightTrader
|
|
January 06, 2016, 06:40:53 PM
Last edit: January 07, 2016, 04:25:06 AM by KnightTrader |
|
Thanks BrannigansLaw! I will try that later and edit in this post if got it working or not.
Edit: Well, I did not got it working, but I did also remember wrong, thats not too easy to add to any faucet. Did not tried in "Faucet in a BOX".
|
|
|
|
|
|
BrannigansLaw
|
|
January 07, 2016, 11:46:30 AM |
|
Thanks BrannigansLaw! I will try that later and edit in this post if got it working or not.
Edit: Well, I did not got it working, but I did also remember wrong, thats not too easy to add to any faucet. Did not tried in "Faucet in a BOX".
oh you're not using faucetinabox. hmm it still is probably a directory issue. Just mess around with it until you get it right. If you need to go back a directors its like so ./libs if you need to go back 2, 3 4 times? its. /../libs, or /../../libs etc. |
|
|
|
|
|
KnightTrader
|
|
January 07, 2016, 12:13:36 PM |
|
Thanks BrannigansLaw! I will try that later and edit in this post if got it working or not.
Edit: Well, I did not got it working, but I did also remember wrong, thats not too easy to add to any faucet. Did not tried in "Faucet in a BOX".
oh you're not using faucetinabox. hmm it still is probably a directory issue. Just mess around with it until you get it right. If you need to go back a directors its like so ./libs if you need to go back 2, 3 4 times? its. /../libs, or /../../libs etc. Hey, thanks for extra help. I have already added other antibot to my faucetinabox faucets, but in two other scripts where I would like to get extra protection is bigger problems. Other has captcha in root index, not in themes/index and other has already action in <form method="post".. and there might come more problems even if I somehow could pass those problems. So, maybe it is easier just to use only faucetinabox, because that is common and most addons and help are for that script. Dont know yet, but that is enough offtopic. |
|
|
|
|
|
BrannigansLaw
|
|
January 14, 2016, 11:46:09 AM |
|
Thanks BrannigansLaw! I will try that later and edit in this post if got it working or not.
Edit: Well, I did not got it working, but I did also remember wrong, thats not too easy to add to any faucet. Did not tried in "Faucet in a BOX".
oh you're not using faucetinabox. hmm it still is probably a directory issue. Just mess around with it until you get it right. If you need to go back a directors its like so ./libs if you need to go back 2, 3 4 times? its. /../libs, or /../../libs etc. Hey, thanks for extra help. I have already added other antibot to my faucetinabox faucets, but in two other scripts where I would like to get extra protection is bigger problems. Other has captcha in root index, not in themes/index and other has already action in <form method="post".. and there might come more problems even if I somehow could pass those problems. So, maybe it is easier just to use only faucetinabox, because that is common and most addons and help are for that script. Dont know yet, but that is enough offtopic. Well the maths question hasn't helped me at all! infact I'm a bit suspicious of it but I'm probably just paranoid. Since installing I've had a big bot problem! Just today 14/01  3886 claims! at 1-2 satoshi! Who would bother, there is a message that says only rewarding 1-2 satoshi as well. |
|
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
January 14, 2016, 11:52:53 AM |
|
wow loks like many bots visit your faucet  |
|
|
|
|
|
BrannigansLaw
|
|
January 14, 2016, 12:01:47 PM |
|
wow loks like many bots visit your faucet Rather me than you guys. I will work on it and if I find a way to stop them I'll update you. |
|
|
|
|
|
FaucetRank.com
|
|
January 14, 2016, 02:36:03 PM |
|
if you are using anti bot links and still your faucet boted then all faucet owner should start to worry because it means now bots know how to solve them.
|
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
BrannigansLaw
|
|
January 14, 2016, 02:50:51 PM |
|
if you are using anti bot links and still your faucet boted then all faucet owner should start to worry because it means now bots know how to solve them.
ah I switched web host and it didnt copy over the htaccess file. My goodness does it make a difference! I will also install antibot links. |
|
|
|
|
|
FaucetRank.com
|
|
January 14, 2016, 04:00:23 PM |
|
if you are using anti bot links and still your faucet boted then all faucet owner should start to worry because it means now bots know how to solve them.
ah I switched web host and it didnt copy over the htaccess file. My goodness does it make a difference! I will also install antibot links. Should make some difference . Add anti bot and feel the difference. |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
Klarck
Member
Offline
Activity: 67
Merit: 10
In Crypto We Trust
|
|
January 21, 2016, 04:42:10 AM |
|
I'm having a problem with the final step of the secure image captcha Where do i upload math.php after save it? And how do i link it on "action="math.php""? I uploaded math.php to the root folder and linked as "action="/math.php"", but my faucet keep saying "Fatal error: Class 'Securimage' not found in /home/vhosts/www.cryptobox.xyz/math.php on line 4" when i try to get a reward. |
Freedom is being you without anyone's permission.
|
|
|
BTC NOW
Newbie
Offline
Activity: 2
Merit: 0
|
|
January 28, 2016, 06:45:56 PM |
|
Hello everyone , it worked , but I have a problem, the result is , I have to double click! , As I change the text color, to black? http://i65.tinypic.com/21e3mnb.png |
|
|
|
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
February 15, 2016, 10:45:48 PM |
|
put the math.php fiel in your root directory ! |
|
|
|
|
|
datalore
|
|
February 16, 2016, 12:00:19 AM |
|
put the math.php fiel in your root directory ! Does not work. It has an error in the image. Captcha image. The same error also >>>  |
|
|
|
|
|
datalore
|
|
February 16, 2016, 07:17:57 AM |
|
ninguém?
|
|
|
|
|
|
LyQaN
|
|
February 16, 2016, 11:27:53 AM |
|
I'm having a problem with the final step of the secure image captcha Where do i upload math.php after save it? And how do i link it on "action="math.php""? I uploaded math.php to the root folder and linked as "action="/math.php"", but my faucet keep saying "Fatal error: Class 'Securimage' not found in /home/vhosts/www.cryptobox.xyz/math.php on line 4" when i try to get a reward. Will You please share the link of this image captcha anti-bot? |
.
▄▄▄▓▓▓▓▓▓▓▓▓▓▄▄
▄▄▓▓▀░░░░░░░░░░░░░░▓▓▓▓
▄▓▓░░░░░▄▄████████▄▄░░░░░░▓▓
▄▓▀░░░░██████████████████▄░░░▓▓▌
▓▓░░░▄██████████████████████▄░░░▓▓▄
▓░░░░███████████▓██████████████░░░░▓▄
▓▓░░░████████████████████████████▌░░░▓
▐▓░░░▓████████████░░░░░████████████░░░▓▓
▓▓░░░█████████████▓████▓███████████▌░░▐▓
▓▓░░░█████████████▓████████████████▌░░▐▓
▐▓░░░▓████████████▓░██░████████████░░░▓█
▓▓░░░████████████▓░██████████████▌░░░▓▌
▓▓░░░███████████▓██████████████▀░░░█▌
▓▓░░░░█████████▓░▄███████████░░░░█▀
▓▓░░░░░██████████████████▀░░░░▓█
▓▓░░░░░░▀██████████▀▀░░░░░▓█▀
▀▓▓░░░░░░░░░░░░░░░░░░▓█▀
▀▓▓▓▓▓▓▓▓▓▓▓██▀▀▀ | | ██
██
██
██
██
██
██ | | ██
██
██
██
██
██
██ | |
|
|
|
|
datalore
|
|
February 16, 2016, 11:33:51 AM |
|
I also have this problem . the image does not load .
|
|
|
|
|
|
FaucetRank.com
|
|
February 22, 2016, 05:48:50 PM |
|
I also have this problem . the image does not load .
Use antibot script easy to add and prevent bots . typing any math question user would not like that. |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
February 22, 2016, 05:55:11 PM |
|
most users also dont linke antibot clicks |
|
|
|
|
|
FaucetRank.com
|
|
February 23, 2016, 05:10:19 PM |
|
most users also dont linke antibot clicks Because anti bots are hidden behind ads but if you put antibot at clear visible place then surly people have no problem to click only 3 antibot links . it just takes 2 seconds extra . see user friendly antibot links here http://faucetrank.com/faucet |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
|
smashbtc
|
|
March 31, 2016, 05:31:17 AM |
|
Thanks for sharing this preventive measures to protect sites from bots. This is really helpful to anyone who owns a faucet. If you're looking for a script to stop bots, I would recommend this one. |
|
|
|
kilopa
Newbie
Offline
Activity: 4
Merit: 0
|
|
April 05, 2016, 06:56:15 PM |
|
Hello sir. Google bring me here. I think this script has a problem (or no), because when I join to some sites it give me "It would apprear you're using a proxy, so please, go fuck yourself!". I'm not using proxies or anything like that. Still, I go to myip.es to check my IP, and show me my IP, not a proxy. Next I go to amibehindaproxy.com, and it show me "No proxyserver detected.". So I decided to google the error, and I see this page at first. I check the site of script http://check.getipintel.net/check.php?ip=heremyip, and show me -6. I don't know what is mean. The bad is that my IP is static so I can't change it. I'm from Spain (I don't know if your script block spanish people). Is for that or what else? Sorry if my english is pretty poor, but I needed to ask you. Thanks. |
|
|
|
|
|
misterbit
|
|
April 06, 2016, 02:14:56 PM |
|
Greetings guys, I found this list of IP that I think can help us https://lists.blocklist.de:4343/lists/
|
|
|
|
|
|
primera
|
|
April 06, 2016, 09:06:28 PM |
|
Greetings guys, I found this list of IP that I think can help us https://lists.blocklist.de:4343/lists/
Nice Thanks.. |
|
|
|
|
|
KnightTrader
|
|
April 06, 2016, 09:20:19 PM |
|
Many bots/bot owners pass through these already. We need new tricks Solution would be some capthcha with several simple games randomly, one of them need to play before claim. Just a thought.. |
|
|
|
|
hoop
Legendary
Offline
Activity: 1523
Merit: 1001
NOBT - WNOBT your saving bank◕◡◕
|
|
April 06, 2016, 10:57:40 PM |
|
Many bots/bot owners pass through these already. We need new tricks Solution would be some capthcha with several simple games randomly, one of them need to play before claim. Just a thought.. Yeah, but that need dev sickles . |
|
|
|
|
KnightTrader
|
|
April 06, 2016, 11:16:23 PM |
|
Many bots/bot owners pass through these already. We need new tricks Solution would be some capthcha with several simple games randomly, one of them need to play before claim. Just a thought.. Yeah, but that need dev sickles . They could earn by that too by showing ads |
|
|
|
|
|
shintosai
|
|
April 08, 2016, 06:24:20 AM |
|
Many bots/bot owners pass through these already. We need new tricks Solution would be some capthcha with several simple games randomly, one of them need to play before claim. Just a thought.. Yeah, but that need dev sickles . They could earn by that too by showing ads we need to understand that faucet owners needed also extra earnings I don't know why bots has been develop since it just an easy task to solve captcha. |
|
|
|
hoop
Legendary
Offline
Activity: 1523
Merit: 1001
NOBT - WNOBT your saving bank◕◡◕
|
|
April 08, 2016, 02:29:07 PM |
|
Many bots/bot owners pass through these already. We need new tricks Solution would be some capthcha with several simple games randomly, one of them need to play before claim. Just a thought.. Yeah, but that need dev sickles . They could earn by that too by showing ads we need to understand that faucet owners needed also extra earnings I don't know why bots has been develop since it just an easy task to solve captcha. Bots develop not only for solve captcha task. |
|
|
|
|
Lutzow
|
|
April 21, 2016, 07:47:36 AM |
|
I applied both step 1 and step 2 but now I cannot access my faucet using my mobile provider showing that I'm behind a proxy. I removed the anti proxy then and things are already working ok. Is that really the case? Is it because the mobile providers are using some kind of proxy as well?
|
|
|
|
herbst
Newbie
Offline
Activity: 39
Merit: 0
|
|
May 11, 2016, 07:36:14 PM |
|
Has anyone tried Cloudflare (And maybe the "I am under attack" mode) to prevent bots? I just switched it on on mine, will report back in the next days if i dont forget.
|
|
|
|
|
hoop
Legendary
Offline
Activity: 1523
Merit: 1001
NOBT - WNOBT your saving bank◕◡◕
|
|
May 12, 2016, 09:33:47 AM |
|
Has anyone tried Cloudflare (And maybe the "I am under attack" mode) to prevent bots? I just switched it on on mine, will report back in the next days if i dont forget.
Waiting for your report about prevent bots by Cloudflare. |
|
|
|
|
|
|
datalore
|
|
May 16, 2016, 11:15:23 AM |
|
Has anyone tried Cloudflare (And maybe the "I am under attack" mode) to prevent bots? I just switched it on on mine, will report back in the next days if i dont forget.
Waiting for your report about prevent bots by Cloudflare. cloudfare = problem adsense |
|
|
|
|
hoop
Legendary
Offline
Activity: 1523
Merit: 1001
NOBT - WNOBT your saving bank◕◡◕
|
|
May 16, 2016, 11:50:02 AM |
|
Has anyone tried Cloudflare (And maybe the "I am under attack" mode) to prevent bots? I just switched it on on mine, will report back in the next days if i dont forget.
Waiting for your report about prevent bots by Cloudflare. cloudfare = problem adsense You can googled for solution. |
|
|
|
|
ankit10
|
|
May 18, 2016, 01:57:16 AM |
|
i cant understand last step (of 4th method)
I M NEW
|
|
|
|
|
JerryMotov
Newbie
Offline
Activity: 56
Merit: 0
|
|
May 30, 2016, 11:26:36 PM |
|
Hi,
I can't find <form method="POST" class="form-horizontal" role="form"> in my faucetbox template.
Where should I put this? <form action="math.php" method="POST" class="form-horizontal" role="form">
?
|
|
|
|
|
|
Gifted
|
|
May 31, 2016, 12:18:44 AM |
|
If your using a xapo script or it might work in faucetbox here is a way to let them go to your page but not able to collect as a proxy, //We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Sorry Proxy not allowed !!</p></div></div>';
$message = "Proxy";
goto error;
}
$q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
$q->execute(array($username,$ip));
$row = $q->fetch(); |
|
|
|
|
|
vodaljepa
|
|
May 31, 2016, 12:27:32 AM |
|
If your using a xapo script or it might work in faucetbox here is a way to let them go to your page but not able to collect as a proxy, //We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Sorry Proxy not allowed !!</p></div></div>';
$message = "Proxy";
goto error;
}
$q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
$q->execute(array($username,$ip));
$row = $q->fetch(); What about VPNs? or VPS? |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
June 02, 2016, 01:13:08 PM |
|
If your using a xapo script or it might work in faucetbox here is a way to let them go to your page but not able to collect as a proxy,
snip
This would likely work somewhat, however would throw some false-positives for anyone with Port 80 on their network open (E.G running a web server, using a public WiFi network and other things all may have Port 80 open), not to mention this port can simply be remapped if needed meaning attackers can bypass this anyway. You can even check if it is open on your network here, if it is this script will block you. What about VPNs? or VPS?
OpenVPN automatically uses Port 80, however this can be remapped to a different Port as the page describes allowing it to pass. My AWS VPS currently has Port 80 closed, meaning this script would let me pass using it. |
|
|
|
|
|
alfaboy23
|
|
June 03, 2016, 09:19:35 AM |
|
If your using a xapo script or it might work in faucetbox here is a way to let them go to your page but not able to collect as a proxy, //We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Sorry Proxy not allowed !!</p></div></div>';
$message = "Proxy";
goto error;
}
$q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
$q->execute(array($username,$ip));
$row = $q->fetch(); I also tried this script and the one from the OP, but it's both not working, I test my site with several proxy apps and sites and I can still access my site. The most effective way is via the .htaccess file. The problem is, it is also blocking my local IP. |
|
|
|
|
botdetector
Newbie
Offline
Activity: 2
Merit: 0
|
|
June 06, 2016, 08:01:29 PM |
|
Hi to all As we all know, detecting proxy is one of the basic strategy. The better one is to analize what user is doing on the website. After analysis we are able to decite whether is a real user or a bot. My small team has wrote early beta of the service allows the recognize the bot. If you are interested in, please write to me also please take a look at: https://bitcointalk.org/index.php?topic=1501132.0best! |
|
|
|
|
|
datalore
|
|
June 11, 2016, 10:04:12 PM |
|
not updates???
|
|
|
|
|
wetrust
Newbie
Offline
Activity: 2
Merit: 0
|
|
June 16, 2016, 10:56:48 PM |
|
there is anyway to stop proxy users from earn only i mean how to make them enter and see the index or main page but disable the reward botton or redirect them to error page when they hit on get reward any genus way here |
|
|
|
|
|
Gifted
|
|
June 16, 2016, 11:08:54 PM |
|
there is anyway to stop proxy users from earn only i mean how to make them enter and see the index or main page but disable the reward botton or redirect them to error page when they hit on get reward any genus way here Yes there is... in function you can put a if code for proxy die code |
|
|
|
|
|
Gifted
|
|
June 16, 2016, 11:10:28 PM |
|
best thing to do is use Step Four
|
|
|
|
|
wetrust
Newbie
Offline
Activity: 2
Merit: 0
|
|
June 16, 2016, 11:18:33 PM |
|
best thing to do is use Step Four
yes i did that step and step 2 also both work great but it would be great if all proxy users can access main page but not get reward i think this better for CPM ads ? |
|
|
|
|
|
Gifted
|
|
June 16, 2016, 11:21:54 PM |
|
best thing to do is use Step Four
yes i did that step and step 2 also both work great but it would be great if all proxy users can access main page but not get reward i think this better for CPM ads ? i will look into this and get back to you using better code then the one i posted |
|
|
|
|
|
Gifted
|
|
June 16, 2016, 11:33:32 PM |
|
so yes i have figured out how to do that for you using an xapo faucet... i will check it with faucetbox Alfaboy you might want to use this //Checks that the username is not empty
if (!isset($_POST['username'])||$_POST['username']=="") {
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Missing email address!</p></div></div>';
$message = "Missing email address";
goto error;
}
$username = $_POST['username'];
//Checks if the user has written something in the captcha box
$captchaChallange = $_POST['adcopy_challenge'];
$captchaResponse = $_POST['adcopy_response'];
if (empty($captchaChallange) || empty($captchaResponse)) {
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Missing captcha, try again!</p></div></div>';
$message = "Missing captcha";
goto error;
}
$response = @file('http://verify.solvemedia.com/papi/verify?privatekey=' . $settings['solvemedia_verification_key'] . '&challenge=' . rawurlencode($captchaChallange) . '&response=' . rawurlencode($captchaResponse) . '&remoteip=' . $ip);
if (!isset($response[0]) || trim($response[0]) === 'false'){
$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Wrong captcha!</p></div></div>';
$message = "Wrong captcha";
}
//We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");
function checkProxy($ip){
$contactEmail="EMAIL";
$timeout=3;
$banOnProability=0.99;
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
$response=curl_exec($ch);
curl_close($ch);
if ($response > $banOnProability) {
return true;
} else {
if ($response < 0 || strcmp($response, "") == 0 ) {
//The server returned an error, you might want to do something
//like write to a log file or email yourself
//This could be true due to an invalid input or you've exceeded
//the number of allowed queries. Figure out why this is happening
//because you aren't protected by the system anymore
//Leaving this section blank is dangerous because you assume
//that you're still protected, which is incorrect
//and you might think GetIPIntel isn't accurate anymore
//which is also incorrect.
//failure to implement error handling is bad for the both of us
}
return false;
}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
//timer check |
|
|
|
|
|
|
|
Gifted
|
|
June 17, 2016, 11:14:29 PM |
|
bump for security update i made for faucetbox bots attacking |
|
|
|
|
|
Swagtoshi
|
|
June 22, 2016, 09:14:30 PM |
|
What does that script do exactly?
|
|
|
|
|
|
Swagtoshi
|
|
June 22, 2016, 09:44:17 PM |
|
How do bot get past the captchas exactly?
|
|
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
June 22, 2016, 09:57:03 PM |
|
What does that script do exactly?
Which script do you mean? The first one in the thread? How do bot get past the captchas exactly?
They use an API which sends the captcha's image to a server (for a small fee) where another person then solves it for a reward. |
|
|
|
|
|
Swagtoshi
|
|
June 23, 2016, 03:18:39 PM |
|
I was wondering what gifted's index.php script did.
|
|
|
|
|
|
vodaljepa
|
|
June 23, 2016, 03:45:35 PM |
|
I was wondering what gifted's index.php script did.
Probably steals your coins |
|
|
|
minifrij
Legendary
Offline
Activity: 2324
Merit: 1267
In Memory of Zepher
|
|
June 23, 2016, 05:46:26 PM |
|
I was wondering what gifted's index.php script did.
The new index.php script added this code at lines 1575 - 1614: <?php
//We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");
function checkProxy($ip){
$contactEmail="Goldkey0070@gmail.com";
$timeout=3;
$banOnProability=0.99;
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
$response=curl_exec($ch);
curl_close($ch);
if ($response > $banOnProability) {
return true;
} else {
if ($response < 0 || strcmp($response, "") == 0 ) {
//There's a lot of comment here that I removed, look it up on the index.php file if you're interested in what it says
}
return false;
}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
?> Basically, here is what it does: if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");
If port 80 is open on the user's computer, then display the message in the die("") and kill the rest of the script. I've explained previously why doing this can cause a lot of false positives, you can read it here: ...
This would likely work somewhat, however would throw some false-positives for anyone with Port 80 on their network open (E.G running a web server, using a public WiFi network and other things all may have Port 80 open), not to mention this port can simply be remapped if needed meaning attackers can bypass this anyway. You can even check if it is open on your network here, if it is this script will block you. ... OpenVPN automatically uses Port 80, however this can be remapped to a different Port as the page describes allowing it to pass. My AWS VPS currently has Port 80 closed, meaning this script would let me pass using it. It would probably work for some bots, however it is not completely foolproof and may stop real users accessing your faucet. function checkProxy($ip){
$contactEmail="Goldkey0070@gmail.com";
$timeout=3;
$banOnProability=0.99;
Create a function which will be called later and create three variables inside of it. These variables are: - Some random e-mail address, not too sure what that is for (as it is not used anywhere else in the script).
- The amount of seconds for PHP to try to access the URL. If the URL can't be found in this amount of seconds (3) then the connection will die.
- If the URL returns higher than this number, then the user is banned - This should be explained more in the next few chunks of code. (It should also be spelled probability)
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
$response=curl_exec($ch);
curl_close($ch);
This basically gets the content from the page http://check.getipintel.net/check.php?ip=USERSIP with the timeout set previously. GetIPIntel is a service that scores IP addresses on how 'bad' they are (E.G if they are a proxy or bot). However, this API is only free for a certain amount of requests per day (500 / 15 per minute), so if your faucet gets a lot of unique users this could do very little for you. if ($response > $banOnProability) {
return true;
} else {
if ($response < 0 || strcmp($response, "") == 0 ) {
//snip
}
return false;
}
This code checks if the return from GetIPIntel is greater than the variable banOnProability. If it is, then the function returns true and marks the user to be blocked. Otherwise, the function returns false and lets them pass. The if ($response < 0 || strcmp($response, "") == 0 ) { is used to find if the response was empty and if the server is having any problems, though the code doesn't do anything in this so it is somewhat useless (unless you want to edit it yourself). $ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
Finally, this piece of code gets the user's IP, checks it against GetIPIntel and if the function returns true, it says the exact same is if port 80 were open. This is a more reliable method of detecting bots and other attackers than seeing if a port is open, however (unless you're winning to pay) it is only functional for 500 users per day. There are no other changes to the original code as far as I can see, feel free to check it yourself using a difference checking tool. It should also be noted that this script only works with FaucetInABox version r63, as r64 changes the code in index.php significantly I believe. |
|
|
|
|
|
kaytokeyos
|
|
July 14, 2016, 12:48:31 AM |
|
<?php> include_once $_SERVER['DOCUMENT_ROOT'] . '/captcha/securimage.php'; $securimage = new Securimage(); if ($securimage->check($_POST['captcha_code']) == false) { // the code was incorrect // you should handle the error so that the form processor doesn't continue // or you can use the following code if there is no validation or you do not know how echo "I'm sorry but you have to answer the math question correctly!.<br /><br />"; echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator."; exit; } ?> how about i change this script echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator."; to this echo "Please go <a href='index.php'>back</a> and use a caculator."; its ok? if i use script above i got eror but if i change the link its work |
|
|
|
|
alw1tt
Newbie
Offline
Activity: 4
Merit: 0
|
|
July 20, 2016, 05:00:56 AM
Last edit: July 20, 2016, 05:13:27 AM by alw1tt |
|
Everything in this tutorial is being used on my faucet. Check it out HERE to see it in action!
Step FourIn step four we will be adding a simple math question displayed as an image as a second captcha. Faucet users cannot claim their satoshi until the math question is solved. Download PHP captcha HERE extract it and add the "captcha" folder to your root directory. If you don't trust that download you can find the original HERE, it will require some configuring though. Now open your template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) paste the following code at the very top line above <!DOCTYPE html>: <?php session_start(); ?>
Paste the following code where you would like the equation to appear <img id="captcha" src="/captcha/securimage_show.php" alt="CAPTCHA Image" />
<br>
<a href="#" onclick="document.getElementById('captcha').src = '/captcha/securimage_show.php?' + Math.random(); return false">[ New Problem ]</a>
<br>
<br>
<input type="text" name="captcha_code" size="10" maxlength="6" />
<br>
<br>
Now you need to create a PHP document. I use a program called Notepad++, however any text editor will work. Create a new document, then paste in the following code: <?php>
include_once $_SERVER['DOCUMENT_ROOT'] . '/captcha/securimage.php';
$securimage = new Securimage();
if ($securimage->check($_POST['captcha_code']) == false) {
// the code was incorrect
// you should handle the error so that the form processor doesn't continue
// or you can use the following code if there is no validation or you do not know how
echo "I'm sorry but you have to answer the math question correctly!.<br /><br />";
echo "Please go <a href='javascript:history.go(-1)'>back</a> and use a caculator.";
exit;
}
?>
Go back to your faucet template file (ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php) search for the following: <form method="POST" class="form-horizontal" role="form">on that same line link your PHP file to it like so: <form action="math.php" method="POST" class="form-horizontal" role="form">
include_once $_SERVER['DOCUMENT_ROOT'] . '/faucet/index.php';
Instead of select everything, copy it, go back to the document you were just making and paste it on the very bottom?And there is a Problem!After using this math script, the referral link become: -- http://yoursite.com/faucet/math.php?r=1XX9xXXZ3XTXXX5kTXxXKCvxkiXNXxdGXNInstead of: -- http://yoursite.com/faucet/?r=1XX9xXXZ3XTXXX5kTXxXKCvxkiXNXxdGXNHow to fix it? |
|
|
|
|
|
alfaboy23
|
|
July 20, 2016, 06:57:35 AM |
|
I've asked that a long time ago But, still no answer, it seems that there is no fix for this. |
|
|
|
|
|
Gifted
|
|
July 20, 2016, 11:16:19 AM |
|
use a <div> and closing </div>
|
|
|
|
|
alw1tt
Newbie
Offline
Activity: 4
Merit: 0
|
|
July 20, 2016, 04:58:40 PM |
|
There is always a fix... Open your Template index.php Replace: <code><?php echo $data["reflink"]; ?></code> with: <code><?php echo str_replace("math.php","",$data["reflink"]); ?></code>That's it!
|
|
|
|
|
Butord
Member
Offline
Activity: 95
Merit: 10
|
|
September 18, 2016, 11:56:01 AM |
|
Is there a method to block certain btc address if I'm not using faucetbox script? Yjahnks
|
|
|
|
|
|
FaucetRank.com
|
|
September 18, 2016, 05:21:27 PM |
|
Is there a method to block certain btc address if I'm not using faucetbox script? Yjahnks
Which script are you using 1st tell me. If you' are using xapo than I can help you easily. It's very easy to block email add or btc address. …………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹…………… |
| | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | .SCAMMERS.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.EXPOSED. | | | | | | .
▄▄▄▄▄▄▄▄ | | | ████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████ | | | |
|
|
|
Butord
Member
Offline
Activity: 95
Merit: 10
|
|
September 19, 2016, 07:11:57 AM |
|
Is there a method to block certain btc address if I'm not using faucetbox script? Yjahnks
Which script are you using 1st tell me. If you' are using xapo than I can help you easily. It's very easy to block email add or btc address. …………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹………………………₹₹₹…………… I'm using paytoshi script. Actually I've already have the code. Yje only problem is where to add it |
|
|
|
|
pkhuba082
Newbie
Offline
Activity: 39
Merit: 0
|
|
July 08, 2017, 07:42:43 AM
Last edit: July 08, 2017, 08:02:48 AM by pkhuba082 |
|
Hi,
Thanks for your support and help
Can anyone help me how to implement this code in Wordpress site?
Thanks
|
|
|
|
|
|
