Post
Topic
Board Services
Re: NEW SERVICE- FaucetBuilder - All features you need to build, no fees/cost!
by
FaucetBuilder
on 30/06/2015, 02:16:29 UTC
DO NOT USE THIS SCRIPT!!!
This script has a backdoor!!!
On this page: https://github.com/destinybogan/Faucet-Builder/blob/master/admin/index.php
The code contains:
Code:
if(isset($_COOKIE['remember'])){
  $_SESSION['admin']=true;
}

This means that if I set a cookie with the name "remember", I AM THE ADMIN!
Hackers can set cookies because they are stored client-side and sent to the server in an HTTP header!

You may think that because it only shows the last four characters of your Xapo key, you are safe.
But a hacker could increase the referral payout to something insanely high, disable the timeout, take the SolveMedia key and run a bot until all the coins are gone.

So do not use this script!



Thanks for advice .....     Hmmm  I'm wondering now:         How many faucets does have it?

I have very few faucets using.. less than 20. I will make the changes ASAP to restore this.
Thank for bringing this up