Pages:
Author

Topic: [PHP] BitLuck Lottery Script - Released under MIT License (Read 29904 times)

newbie
Activity: 10
Merit: 1
I have been searching for a working lottery script also, well more of a raffle script

This is my version of the original code with some graphics added.

http://bitcoin.bigmoney.biz


Check it out.
sr. member
Activity: 588
Merit: 251
I have been searching for a working lottery script also, well more of a raffle script
member
Activity: 113
Merit: 10
can somebody shoot up a working site to see how its looking .D?
newbie
Activity: 5
Merit: 0
Hi,

I need a raffle script with Bitcoin Gateway!!!
Any available here on this forum?!!!

Kind Regards,
Alex
legendary
Activity: 1064
Merit: 1001
So it's a cool script made specifically for educational purposes, as it has multiple security flaws. I'm taking some look into this script, could you tell me those flaws?
that like asking...

How can I abuse non safe systems... mind you mine has updated code from the original. See my sig.
sr. member
Activity: 392
Merit: 251
So it's a cool script made specifically for educational purposes, as it has multiple security flaws. I'm taking some look into this script, could you tell me those flaws?
sr. member
Activity: 322
Merit: 251
Interesting that people are still commenting on this. If someone is willing to maintain a fork of BitLuck, please let me know. I will update the original post in this thread, as well as update the README on the Github repository. As of right now, there are 20 forks reported by Github's network graph, but not one of them seems to be maintained to me.

The project is more popular on Github than I would expect for something of this nature (guys, it's really ugly code), and I'd like to be able to link to something better. I've been leaving it up as an example for developers to understand how to interact with the Bitcoin API.

You can email me at [email protected].

~lulz

EDIT - Taking the project down for both security and licensing reasons. If you'd really like the code for some reason, you may use the email above.
legendary
Activity: 2268
Merit: 1140
If I fix the vulnerability, is this a working and secure script in all other aspects?

From what others have stated, yes.    Please keep me in mind if you are able to fix the issue.  I would love a working version of this script.  I would even pay for it.    Thanks.
hero member
Activity: 504
Merit: 500
sucker got hacked and screwed --Toad
If I fix the vulnerability, is this a working and secure script in all other aspects?
legendary
Activity: 2268
Merit: 1140
Can someone who has patched the vulnerabilities send me a working version?   I would like to test it out and maybe design a nice skin for it. 
legendary
Activity: 896
Merit: 1000
Louis Vuitton
This thread is very old, but thank you so much I will take a look into this.
newbie
Activity: 10
Merit: 1
BUMP Roll Eyes

http://s13.postimg.org/k5j2cxeh3/Capture.png

I have tried this on two different hosting accounts/servers now and still get the same result. Would really like to get this functioning.

Latest version is now ready for testing at:-

http://bitcoin.bigmoney.biz

Enjoy!
newbie
Activity: 1
Merit: 0
yeah, i also thought about that,
have to add some stats/overview of entered addresses and maybe last winners or such,
should be no big deal.
Except proving that you didn't just pick whatever winner you wanted. (I guess people will just have to trust you.)

Implement the code lottery using Script of Bitcoin or Ethereum platform increase the possibility that people to have more trust in the system/lottery?
hero member
Activity: 868
Merit: 500
Quarkcoin Lottery website, based on this code but pretty much modified. still need some work and desing but its working well!

http://qrklotto.no-ip.info/
newbie
Activity: 10
Merit: 1
BUMP Roll Eyes

http://s13.postimg.org/k5j2cxeh3/Capture.png

I have tried this on two different hosting accounts/servers now and still get the same result. Would really like to get this functioning.

Have a look at my 'fully working' Weekly Bitcoin Lottery website, based on this code.

http://bitcoin.bigmoney.biz
newbie
Activity: 30
Merit: 0
BUMP Roll Eyes

http://s13.postimg.org/k5j2cxeh3/Capture.png

I have tried this on two different hosting accounts/servers now and still get the same result. Would really like to get this functioning.
newbie
Activity: 30
Merit: 0
I have installed this script but when I try entering a wallet address to play the lottery I always get "ERROR: You entered an invalid address. Please try again." but the address is valid??? Any ideas?
sr. member
Activity: 322
Merit: 251
Thanks for your script. I've noticed two minor issues though:
1. When bitcoind cannot be reached (not running/timeout) the php error displays the request (including username, password and IP adress). It would make sense to suppress this details and throw a generic error.
2. The page which shows the deposit address and waits for confirmation is not fully compatible to the new setting to allow inputs other than 1:

Quote
Please send 1 BTC or more to the following address:

mjCQzqjNdLratrY6MsdS7fhtiYp8yieibi

This page should change when the address above receives at least 0.1 BTC with 1 confirmation.

WARNING: Non-refundable! Please only use multiples of 1 BTC (anything else is rounded down.)

Didn't notice this but I have just pushed new updates to the Git repository with fixes to these and a few other minor issues.
sr. member
Activity: 252
Merit: 250
Thanks for your script. I've noticed two minor issues though:
1. When bitcoind cannot be reached (not running/timeout) the php error displays the request (including username, password and IP adress). It would make sense to suppress this details and throw a generic error.
2. The page which shows the deposit address and waits for confirmation is not fully compatible to the new setting to allow inputs other than 1:

Quote
Please send 1 BTC or more to the following address:

mjCQzqjNdLratrY6MsdS7fhtiYp8yieibi

This page should change when the address above receives at least 0.1 BTC with 1 confirmation.

WARNING: Non-refundable! Please only use multiples of 1 BTC (anything else is rounded down.)
hero member
Activity: 672
Merit: 500
BitLotto - best odds + best payouts + cheat-proof

The point is, I don't plan on using this script. I've released it for educational purposes. I don't plan on editing it or changing it because it does not benefit me at all.
Ok, it was more directed to those who are thinking of using it as is.



Quote
You can cheat anything. Hell, you could cheat your own system, bitlotto.
I don't think so. At least I haven't figured out a way yet. I could not pay the winner or pay the wrong winner (Everyone would know right away) but I can't fake the results giving it to myself. I'd have to either rig Canada's national lottery or figure out a way to alter already existing blocks in the in Bitcoin network. It would be pretty tough.
Pages:
Jump to: