The problem with that method is that whoever has the hash can cheat. That would mean you or anyone you share the numbers with. NEVER should the winning numbers come before the tickets are bought!
hm, you're right... I should just let the server generate the numbers on every draw automatically 
[/quote]
I wouldn't. Letting the server make the numbers makes it impossible for all the player to know if you are cheating or not. There is no way to know if you pretend making the numbers and make one of your tickets win.
[/quote]
I'll think about the method of generating the numbers
You have to trust the person running the lottery:
-If the numbers are generated before the lottery (give them out encrypted, and give the key after the round for proof), how do you know the numbers weren't given to a buddy to win,
-If the numbers are generated after the lottery, how do you know the person didn't make the winning numbers so his buddy could win,
-If you bet on something out of the lottery runner's control (like what will the last two digits of the hash of block 134000 be), how do you know the person running the lottery won't just take the money and run instead of paying?
Anecdote of fair warning:
A city boy moved to the country and bought a donkey from an old farmer for $100. The farmer agreed to deliver the mule the next day.
The next day, the farmer drove up and said, "Sorry, but I have some bad news. The donkey died."
"Well then, just give me my money back."
"Can't do that. I went and spent it already."
"Okay then. Just unload the donkey."
"What ya gonna do with him?"
"I'm going to raffle him off."
"You can't raffle off a dead donkey!"
"Sure I can. Watch me. I just won't tell anybody he's dead."
A month later the farmer met up with the city boy and asked, "Whatever happened with that dead donkey?"
"I raffled him off. I sold 500 hundred tickets at two dollars apiece and made a profit of $998. "
"Didn't anyone complain?"
"Just the guy who won. So I gave him his two dollars back."
-If the numbers are generated before the lottery (give them out encrypted, and give the key after the round for proof), how do you know the numbers weren't given to a buddy to win,
-If the numbers are generated after the lottery, how do you know the person didn't make the winning numbers so his buddy could win,
-If you bet on something out of the lottery runner's control (like what will the last two digits of the hash of block 134000 be), how do you know the person running the lottery won't just take the money and run instead of paying?
Anecdote of fair warning:
A city boy moved to the country and bought a donkey from an old farmer for $100. The farmer agreed to deliver the mule the next day.
The next day, the farmer drove up and said, "Sorry, but I have some bad news. The donkey died."
"Well then, just give me my money back."
"Can't do that. I went and spent it already."
"Okay then. Just unload the donkey."
"What ya gonna do with him?"
"I'm going to raffle him off."
"You can't raffle off a dead donkey!"
"Sure I can. Watch me. I just won't tell anybody he's dead."
A month later the farmer met up with the city boy and asked, "Whatever happened with that dead donkey?"
"I raffled him off. I sold 500 hundred tickets at two dollars apiece and made a profit of $998. "
"Didn't anyone complain?"
"Just the guy who won. So I gave him his two dollars back."
I understand what you're meaning. I will just show everyone that they can trust me. I would never take away the money, because if I were a player in a lottery I wouldn't like that and so I don't do it, a very simple reason.
Some people may know me as moderator and level2 user in one of the world's biggest gamehacking communities (elitepvpers), others may know me as a web developer. However, these jobs need trustful people, and I've shown that I'm trustful.
I understand when you don't trust me at first, I wouldn't do so too. But when you see it's running well, you can have your own thoughts of the thing and you may trust me or not. At least it's every user's own decision.
I will think about a safe method of generating the numbers. Maybe I'll let random.org do this job.
