Bitcoin Forum

http://www.btcircle.com/dice/screen.jpg

You may remember our last product CoinWheel (https://bitcointalk.org/index.php?topic=327123.0), which became unexpectedly successful for us. Thanks to your support and requests we have decided to offer another unique script from our workshop.

After many hours of work and testing we are finally intoducing CoinDice - an unique opportunity to run your own casino dice game. You can check out our demo which gives you and idea how it works.

Demo:
btcircle.com/dice (http://www.btcircle.com/dice/)
Use free bitcoin option to try it out for yourself!

Main feature is that you can run it on every bitcoin-like wallet installed on your server. Only thing you have to do is to choose currency during installation process.
Everything is fully automated and after installation CoinDice will take care of itself so you can focus on something more important.

Our product also has an auto installation script which will help you to set everything important to launch it. It includes step by step instructions and process itself shouldn’t require more than basic computer skills.

Game has adjustable house edge. So your profits depends completely on you . But of course - more people will be betting more you will be earning.
Using our administration you can have all under your control so you are able to change a lot of parameters like bet frequency for players (or bots), minimal withdrawal, bankroll/max bet ratio and so on.


REQUIREMENTS:
- PHP (>= 5.3)
- MySQL
- CRON
- Any bitcoin like wallet

MAIN FEATURES:
- Auto Installation Script
- Adjustable House Edge
- Automatic Betting (Bot)
- Chat
- Provably Fair
- Administration full of options
- Detailed Statistics
- Full Support (Installation + Follow-up Support)


Screenshots from administration and installation process:
Administration: http://imgur.com/a/Ay144
Auto Installation: http://imgur.com/a/iIjtC

If in doubt, check the rating of our last script CoinWheel:
https://bitcointalk.org/index.php?topic=327123.msg4090658#msg4090658

Or check our trust ratings.


Good luck with your gambling bussiness!

Imrer & Johny1976

Leave us PM if you are interested.

Thanks man. It means a lot from you! :)

Great to see finally a Dice script. But couldn't you get legal problems since it's an exactly copy from PrimeDice.com?

Use your own design.

I do not recommend buying this.

I agree, also to inform users he is sending solication pm's to what i assume is all users who have posted in the primedice thread.

This is near to exactly copied from Primedice... Why would anyone buy this?
EDIT: And yes, I also got a PM from this..

We've been inspired by primedice design but we haven't copy anything. Check all features which this site have. We are also not writing to all users but only to those with which we're dealing in the past.

Users can change design if they want to. It about mechanism and options in administration.

Would you sell just your script but for a lower price? So we could give it to a thirdparty developer/webdesigner?

PM sent. Thanks

I can vouch for imrer and johny. Have dealt with them in the past. Very honest and trustworthy guys.

Dice script looks good but design does look a lot like primedice's which is a bit of a shame...

imrer got the banhammer for sending multiple people unsolicited advertising PMs.

We were sending this PMs only to people we have already traded with at history.

So he was banned unjustly.

Also he has got negative feedback for the same reason. As well as me.

You never traded with me, but you still sent me a PM.

I'm 100% sure we were discussing this (https://bitcointalk.org/index.php?topic=286286.0) at PM.

Mass PMs, giant fonts and unreasonably sized screenshots don't look like an acceptable marketing strategy to me. Please resize browser window to minimum possible when taking screenshots, crop and/or downsample the screenshots. Don't send any kind of personal messages to unrelated people and don't use colors or size for your messages and signature.

Thanks

Not interested in superficial things, we give real value to people. We got a negative review, even though we did not cheat anyone. And yet people believe us and buy products from us, because we have a reputation. But thanks for your suggestions. We appreciate it.

Installed, work fine ... thank ...

Thank you for reference!

You never did business with me but sent me a PM, twice. I didn't even respond.

We are sorry about that. Sometimes we accidentally sent the message to someone else.

New version released!

CoinDice 1.2

- Giveaway time limit bug fixed
- Deposits bug fixed
- Provably fair (rainbow tables) bug fixed

Owners of earlier licenses, please contact me via PM, I'll send you the update.

Pmed you for 1.2. Please reply.
I also emailed you regarding 0 confirmation deposits.

I have responded, sorry for delay.

Wait how much is just the script?

Price of the script is 1.1 BTC

Do I need to install the script ssl certificates ?

No, it is not necessary to have any ssl certificate to run our script.

Can you explain the updates more? Maybe a change log with more details.

What files were changed? 

Worried another scam site like yopurs will take all the winnings?

Yes, exactly. That's why we have such good ratings. ;)

Would still like to buy it. (See my pm)

I would even pay more if it could be possible.

We are currently researching the EMunie coin, we'll inform you how it's going.

This coin is completely different against normal currencies based on Bitcoin, so this is the reason why it takes so much time.

Thanks

Don't forget my questions.

More importantly, can you make a SQL file that upgrades an existing one? I don't want to drop any tables.

You can export data from your tables and after update installed import them again.

If you want help, send me PM please

Hey, just curious if I could get a vouch/demo copy of this code? I'd like to review it. Please pm.

PM sent

May I ask why this script is sooo pricey? $1000 for a non-unique script!

Because this script is professionaly coded and it is unique. :)

Not really... it looks just like primedice

Has anyone bought this yet?

Is there a way to get a demo also?  e.g. limited features?  I just want to see the base.

By what means Unique?Its sold to many different people right?

If you want to do something different I can do CSS for your script

It means you can start your casino business in couple of minutes (installation is included). If you don't like design, you can hire somebody to change it for you or change it yourself.

Is the backend written in PHP?

Sure

johny - have you figured out why the upgrade broke my site?

Because you are trying to transfer database data from old to new version, which is not compatible with old data.

You can't transfer old data into the new database. This is what broke your site, not the update :)

You told me to do that!  >:(

I like that you provide updates, but your description of the updates is really bad. I still do not know the details of the updates, even though I asked several times.

 

You can read them here:
https://bitcointalk.org/index.php?topic=404227.msg4692822#msg4692822

I don't know what you want to know about the update..

I can make the script that converts the old data into the new database. Do not doing it manualy, because it will break your site (that's what I've told you).

What is the giveaway time limit bug? How was it fixed?
What is the deposits bug? How was it fixed?
What is the provably fair (rainbow tables) bug? How was it fixed?


Please make script.

2 days ago, you told me to import SQL. 20 minutes ago, you told me NOT to import SQL because it would break my site.

I know import breaks site. I told you about it.

I told you about it first.

Anyway, who was talking about manual import? :)

I'll inform you about the converting script status.

Btw. Individual issues are addressed in the PM ;)

How much this script cost? Can you give good price if buy also coinwheel script?

Yes, there's a discount for both scripts orders.

Please contact me at PM

Just a warning for everyone else.
 
I purchased this script. It worked perfectly and as advertised for the first 3 days.
 
This morning I woke up to find that there was a new admin account created on all the sites I had created and all the wallets were empty. This included one site that had not yet been advertised or linked to anywhere.
 
I have emailed Imrer about this but have not yet had a response(7 hours ago).

Oh my god yes same EXACT thing happened to me. Unadvertised URL.

They convinced me it was a keylogger or something like that but I was certain it wasn't.

I shall consult a security researcher to delve deeper into the script. This is definitely not a coincidence.

JOHNY SEND ME BACK MY 3.2BTC RIGHT NOW. THIS IS NOT ON.

I don't know PHP specifically but I do code, so I can read it well enough, if there is a back door or dial home in the code, I have not yet found it.

Yes me neither. I would suggest that it is very well hidden. I will keep looking as well. Let me know of any finds.

Found a couple of potential holes:

requestAccess.php:

if (!empty($_GET['p']) && file_exists('./pages/'.$_GET['p'].'.php'))
                include './pages/'.$_GET['p'].'.php';

admin\ajax\delete_admin.php:

mysql_query("DELETE FROM `admins` WHERE `id`='".prot($_GET['_admin'])."' LIMIT 1");

Also it looks like the passwords are stored as non salted MD5 hashes :(

I also bought the script. PM me for more info. I like to keep things private.

Buyers want to be the house, only to find out they are the gamblers....oops.

Passwords are stored as md5 hash.

There's no such thing in requestAccess.php:

https://i.imgur.com/LIKDxAf.png

It may been edited by someone else (hacker).

admin/ajax/delete_admin.php:

i think it's ok, what's wrong with that?

jonstaz, we didn't stole anything from you.


If there was a wallet steels, it could be a security error. We'll do security research tonight and we'll let you know.

My bad, it's in /admin/index.php not requestAccess.php

              if (!empty($_GET['p']) && file_exists('./pages/'.$_GET['p'].'.php'))
                include './pages/'.$_GET['p'].'.php';

So the problem with that, and admin\ajax\delete_admin.php:

mysql_query("DELETE FROM `admins` WHERE `id`='".prot($_GET['_admin'])."' LIMIT 1");

is that _GET is in the URL, which allows for an injection, we can put any .php in there, and because you don't have any IN_SCRIPT variables defined there's nothing preventing included pages being accessed directly.

Just hashing the passwords in MD5 isn't good enough, you at very least need to salt each of the hashes.

There are no transactions for admin deposits or withdrawals.

    if (!empty($_GET['p']) && file_exists('./pages/'.$_GET['p'].'.php'))
                include './pages/'.$_GET['p'].'.php';

This is OK. It's including the file only if the file is located at the /pages folder. That's standart procedur.

is that _GET is in the URL, which allows for an injection ...

There is function prot(), which protects the query against sql injection.

and because you don't have any IN_SCRIPT variables defined there's nothing preventing included pages being accessed directly.

Every included file contents this row at th beginning:

https://i.imgur.com/mKyD0sP.png

btw. You can't include remote PHP file from another server, because web service never gives the unexecutted file..

So it means that no flaw has been found.

Please read something about PHP before you claims something like this.

If no flaw has been found then why did the exact same thing happen to two different people? It seems something shifty is going on imo.

Johny please send me the fixes I requested as well. With the finished files I will send it all off to a verified security researcher and from there I will find out the truth.

Thanks,

I said they were POTENTIALLY holes, so calm down. I've had ~1,000,000 VOLT, ~60,000 BIC, ~30,000 DGB and ~10,000 POT stolen, so if anyone should be getting antsy it's me.

I understand your position and I'm sorry for your lost. Stay touched before we gets security research result.


Working on it, sending in few hours.

So it's been a lot more than a few hours....

Yeah, hmmm.

Any updates Johny?

I am willing to evaluate the code, but have any of the creators messaged you back?

I have received no response, don't know about others. Perhaps johny is still busy with the script he said he would make (https://bitcointalk.org/index.php?topic=404227.msg4964500#msg4964500) on 02/05/2014.

Perhaps.

I would love to give imrer and johny the benefit of the doubt, but with absolutely no response via email, and the responses here being very defensive and unhelpful I dunno that I can much longer.

Looking to buy this if all the other sales give positive feedback on it. As it seems a few customers have been unanswered.

Any news?

I think it's more complex to build in the EMunie API. We are Bitcoin API pro. but we have zero experiences with EMunie as it works on completely different principle and API than most of the cryptos.

I think it's work for EMunie professionals, that's what can I say now.

Sorry

Responded. Thank you!

looking into this cesspool --- for once i may agree with you! =\ *will report back*

I have this script and I checked the code, no hidden stuff as far as I know, safe I think.

scam avoid this guy, somone posted a free Dice Casino site Script for free few days ago.


what a fucking dumbass.

That was completely different script. Our script is originally coded and we have good reputation.

Someone who even didn't buy the script (so he knows nothing) trying to harm us. Funny

CoinDice 2.0 released!

Official thread:
https://bitcointalk.org/index.php?topic=472855.0

if you are a professional php programmer then you know that you can make a transition script to transition an old database to a new database structure.

more then likely there is no backdoor or callback. it is more feasible that the maker knows nothing about securing their programming, or there is a hidden field in the login form that gives them access. possible to shell the script, i have already confirmed this on their demo.

unbelievable.

There's nothing hidden in script. v1.2 had some minor security problems but v2.0 is checked by security experts and is 100% secure.

Please use the new thread for version 2.0.

Have Intress. Please send your BTC Wallet via PM

Hi i have this script But Version 1.0 Someone need This Script PM Me for More Details
,
I sell Cheap ;) ,

This is not my backdoor. You can check the original files that we have sent you. There's no such thing.

You just let someone to put the backdoor in your site, don't blame me from that.

both version 2.0 and 3.0 have a security issue which johnny did not take care of, they both allow for the creation of new admins with ease they can take your funds and destroy your site...

Without proof you are just trolling here. ;)

yea right okay
 
check it out i launched a dice site that earned only .004 and someone still stole all the money even after i had deleted the install files and guess what, IT IS YOUR BACK DOOR ASSHOLE

Where you clever guy?

how auto is auto? Do I need to install php? Can I use my own server, or should I rent one? Linux or will windows?

Yes, you need to install PHP but we are giving installation support for such things and we'll do it for you if you don't know how to do it.

You can use your own server

I recommend to use Linux

Please use the new v3 thread: https://bitcointalk.org/index.php?topic=507515.40

PHP is required, it says in the OP

Guys do not buy this Script after reading this you will surely not.
My friend bought this script and we installed it ,everything was working fine until we launched it!
On the first day itself a user deposited 1000 LTC we were shocked! but he withdraw-ed them after 7 seconds.
As our own wallet was having only 30 LTC we thought the site showed an error to him.
But after few minutes he deposited 30 Ltc and withdraw-ed them
 and now our balance was 0!!!!!!!!!!!!!!!
This script can easily be hacked!If our balance would have been 1000LTC on the first day, he might have taken them also!!!!
Here are the proofs:
http://s1.postimg.org/eg782h1i7/Capture.png
If you want the link of my website in which this script is installed than contact me!

The amount he deposits does not have any id!!!!!!!

was scammed by johny1976 too. my topic https://bitcointalk.org/index.php?topic=1065017.0

hey guys if you can give me the script then i can solve this problem..pm me if you can help me and some other users too :)