Is there a tutorial on recording the IPs?
No but you can always go into the MySQL table with phpMyAdmin and read out the IPs.
Also is it possible to add a bit of code to faucetbox.php which requires the user to click a box to send satoshi? Say an 'Are you sure?' box
Yes, but I think you'd better not mess with the send() function.
Why not add/edit the code around the code below? You could easily do some verification before calling:
"$ret = $fb->send($address, $reward);"