destinybogan / Faucet-Builder

Create your bitcoin faucet in minutes
20 stars 20 forks source link

Security flaw in timer #6

Open goldkey0070 opened 8 years ago

goldkey0070 commented 8 years ago

People are getting around the timer. Is the timer based on ip's only?? Can you make it so the user ID has a timer as well to get rid of this problem?? I would be happy to pay for this. contact me at goldkey0070@gmail.com

REF: https://bitcointalk.org/index.php?topic=1559981.0

I added this code to fix

Find this code if($response->success){      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';      $url = get_main_url()."?r=".$username;      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and changed to this if($response->success){ header('Refresh: 30;url=[b]change to your faucets url[/b]'); $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';      $url = get_main_url()."?r=".$username;      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

This redirects back to your page after 30 seconds so that the captcha resets so that a imacro program cannot be programmed to just refresh and get credit every hour when they are sleeping. i would suggest do this immediately!  Make sure you put your faucet address where is says change to your faucet url.

leonidasgomes commented 8 years ago

Nice!