FAUCET.WIN - Drop-in Dogecoin Faucet (PHP 8.1+ / MySQL)
======================================================

What this is
------------
A small, security-first faucet webapp:
- Email registration + email verification
- No duplicate accounts (unique email)
- 1–100 server-side dice roll
- Default rules: 1 roll every 15 minutes, max 5 rolls/day
- Admin panel (/admin) to edit faucet settings & view users
- Bot protection: Cloudflare Turnstile (recommended)
- CSRF protection, sessions, basic rate limiting, security headers

Install (Namecheap shared hosting)
--------------------------------
1) Create a MySQL database and user in cPanel.
2) Upload the ZIP contents into your domain's document root (e.g. public_html/).
3) Visit: https://YOURDOMAIN/install/
4) Enter DB creds + create your admin account.
5) IMPORTANT: Delete the /install directory after installation.

Turnstile (recommended)
-----------------------
Create a Cloudflare Turnstile widget for your domain and paste the site key + secret in the installer.

Admin panel
-----------
- URL: /admin
- Change:
  - claim_interval_minutes
  - max_claims_per_day
  - optional caps (daily_user_cap_doge, daily_site_cap_doge)
  - payout_table_json (ranges 1-100)
  - maintenance_mode + message

Notes / Hardening tips
----------------------
- Always use HTTPS.
- Set a strong admin password (12+ chars recommended, installer enforces).
- Consider enabling Cloudflare + WAF rules for /register, /login, /claim.
- Delete /install after setup.

"Free API bot control features" included
----------------------------------------
- Turnstile check on registration + claim
- IP-based rate limiting buckets for:
  - registration, login, resend-verification, claim
- Email verification tokens expire in 30 minutes

Next steps (optional)
---------------------
- Add a Dogecoin wallet payout/micro-withdraw system
- Add "device cookie" risk scoring + suspicious activity flags
- Add admin actions (ban user, reset cooldown/balance)
