Quote from: szgal on June 30, 2015, 08:30:45 PM

Quote from: FaucetBuilder on June 30, 2015, 07:31:34 PM

Quote from: szgal on June 30, 2015, 02:37:37 AM

I double-checked, and in my opinion this backdoor is fully intentional.
...strip...

The intention was not to take advantage of a backdoor. Instead it was a silly mistake meant to give the option for the admin to not have to relogin everytime.
It has already been fixed and can be checked by faucet owner on the script.

As I mentioned in the first post this has been done as a hobby and service is meant to be free. You can now check that it has been fixed.
Thank you for bringing this up. My intention is to make honest business and help new faucet creators.

I can confirm that the "remember" cookie bug is fixed. Thank you for acting so fast. I thought it's intentional because in the initial commit (https://github.com/destinybogan/Faucet-Builder/commit/49e11c91812d020b677fe791faffb06e27da706c), there's no setcookie("remember"). This means you either wanted to write some code that sets the cookie but then forgot about it, or you backdoored the script and put a "remember me" checkbox to make it less suspicious. Sorry for accusing you if the former is the case.

By the way, this script still has a security vulnerability which allows full write access to the database for everyone who can log in as admin.

I appreciate the feedback and making note of these things. As I said I am doing my best (with the resources I have) to make a good and honest business. I will continue to update these things as fast as I can and am on to the extra database issue you mentioned.

Cheers dezoel!