I appreciate that you are seperating yourself from the issue, but it'd be great if you guys were more involved in helping people out.
There are a LOT of faucets affected by this. It's an SQL injection problem, this is something you could assist with I'm sure. You just don't/won't look at the script to help us out!
It doesn't look at all like a SQL Injection vulnerability, I really don't think that's what causing it. Why do you thinks it's a SQL Injection? I'd say it's rather some subtle error in code that calculates the reward or handles the timer or both. Either way it's probably not trivial and would require a lot of time and effort to fully analyze. You can't expect that I'll fix every random script out there, that's just impossible. I have FaucetBOX.com, Faucet in a Box script and ScanTheBOX.com to maintain, that's engaging enough.
You should all just get in touch with each other and either force RaphaelM to fix that (he is the one that should do it after all if you paid him for the script) or hire someone to fix that and split the cost. Or you can always use the script that's officially supported by us. Or even Microfaucet, as it's already proven to be safe.
With all of that said... Something like that hurts everyone. I'll probably look into that (but no guarantees and I think that I won't be able to look into that before 10th July) if you send me the script source. But no one sent me the code yet, so how can I possibly help?
However, just like
minifrij said, I think
Elbandi would be a better person to ask if it's actually based on the Minifaucet.