Topic: [Updated 19/Jul/2016] Faucet Owners Against Scammers and Bots - page 3. (Read 36685 times)

if (array_key_exists('address', $_POST) && $data['enabled'] && $data['eligible']) {

$security_settings = array();
    $q = $sql->query("SELECT `name`, `value` FROM `Faucetinabox_Settings` WHERE `name` in ('ip_check_server', 'ip_ban_list', 'hostname_ban_list', 'address_ban_list')");
    while($row = $q->fetch()) {
        if(stripos($row["name"], "_list") !== false) {
            $security_settings[$row["name"]] = array();
            if(preg_match_all("/[^,;\s]+/", $row["value"], $matches)) {
                foreach($matches[0] as $m) {
                    $security_settings[$row["name"]][] = $m;
                }
            }
        } else {
            $security_settings[$row["name"]] = $row["value"];
        }
    }

    if(!empty($_POST["mmc"])) {
        $_SESSION["mouse_movement_detected"] = true;
        die();
    }

    if($_SERVER["REQUEST_METHOD"] == "POST") {
        if($security_settings["ip_check_server"]) {
            if(!preg_match("#/$#", $security_settings["ip_check_server"])) {
                $security_settings["ip_check_server"] .= "/";
            }
        }

if ($_SERVER['REQUEST_METHOD'] === 'POST' && !isset($_POST["new_password"])) {

  $view['main']['result_html']  = '';
  $view['main']['waiting_time'] = 0;
  $success                      = "false";
  $ip                           = get_ip();

$disallowedWords = array(
  'yandex.',
  'inbox.',
  'mail.',
  'ukr.net',
  'bigmir.net',
  'meta.ua'
);
// Search for disallowed words.
foreach ($disallowedWords as $xword) {
  if (strpos($_POST['username'], $xword) !== false) {
    $view['main']['result_html'] = '
The e-mail you are using is not allowed!
';
    $message                     = "Forbidden";
    goto error;
  }
}