Quote from: bit1 on June 30, 2015, 01:54:00 AM

Quote from: szgal on June 30, 2015, 01:39:43 AM

DO NOT USE THIS SCRIPT!!!
This script has a backdoor!!!
On this page: https://github.com/destinybogan/Faucet-Builder/blob/master/admin/index.php
The code contains:

Code:

if(isset($_COOKIE['remember'])){
$_SESSION['admin']=true;
}

This means that if I set a cookie with the name "remember", I AM THE ADMIN!
Hackers can set cookies because they are stored client-side and sent to the server in an HTTP header!

You may think that because it only shows the last four characters of your Xapo key, you are safe.
But a hacker could increase the referral payout to something insanely high, disable the timeout, take the SolveMedia key and run a bot until all the coins are gone.

So do not use this script!

Thanks for advice ..... Hmmm I'm wondering now: How many faucets does have it?

I have very few faucets using.. less than 20. I will make the changes ASAP to restore this.
Thank for bringing this up