felinegambler / cryptodice Goto Github PK

All my coins were stolen by code in your script going to a static bitcoin address

hello, after following the steps of the readme i've manage to install the script. but i've noticed 2 things:

1. i can access to the admin page (but when i add an admin it doesn't show up in the admins list, nor admin:admin shows up)
2. the index.php doesn't show up, in the url bar it shows up the unique url of the player but the page itself doesn't work

DO NOT use this script. It contains MULTIPLE SQL vulnerabilities/ backdoors allowing an individual to make unlimited withdrawals and manipulate the outcome.

Backdoor is included for free. creator can login to your site's admin panel and withdraw all your coins. classy!

I had sent $60 to the address under the admin page and realized only after that the address was not accessable by me. I hope this is an honest mistake, and would like to have the money returned.

Return address: 1PXn8Ugope252e9ePSUpdL6YrBKf6uG9Mp

0.2+ BTC was sent to: 1NPTYuzo2imRi7oiow6gszX3QQccnPWAGJ