how did you hacked my site?
Wait. Answer me first - Why are you asking people to enter their private keys?
okay fine im naive. im gonna change to ADDRESS + SIGNATURE authentication.
im just mad and in shock on how did top up your address.
did you try to send some of your fake to an address?
Well I can't trust that. You seem to know enough to ask for a private key which converted to a proper P2SH address.
i fully understand your concern.
im gonna switch as i said to an address + sig login. so the user won't have doubts.
just one question! how did you hacked my website i don't understand?
i validate every input...
Well the thing is you don't validate every input. IF you PM me the code, I'll tell you exactly where you went wrong.