Ok I read it, but how can I create those hashes on flyby for every roll?
And then publish all rolls/bets/rewards in the end of the day?
OK, so what you do is when a user clicks on play, your server generates a random secret.
$randomSecret = [use secure random function];
Give the hash to the player:
hash("SHA256", $randomSecret);
Display this hash in Flash. Let the user enter their own client secret.
When they click on spin, send the player's hash, the server concats the two strings, and then hashes it again to derive the result of the spin. Send the unhashed secret back after the spin, and have the Flash automatically verify, and also display the secret so players can manually verify it too.
