search

SjonHortensius / 3v4l_org

An online php shell
40 stars 3 forks source link

Truncate scripts from https://plg.bet/provably-fair/coinflip #4

Open SjonHortensius opened 1 year ago

SjonHortensius commented 1 year ago

3v4l is used by an apparently pretty popular betting site to verify bet outcomes. These scripts pollute the database without much use. I'm considering removing these scripts (it seems there are ~ 250k submits right now) and notifying the site owner to either use another service, target single versions for their submits or schedule a cron to remove these submissions from the db

SjonHortensius commented 9 months ago

this stinks but works

delete from result where input in (select input from "functionCall" where function=(select id from function where text='hexdec') and input in (select input from "functionCall" where function=(select id from function where text='hash')) and input in (select input from "functionCall" where function=(select id from function where text='substr')) and input in (select input from input_src where raw like '%$roll_colour = %' and raw like '%server_seed%'));

delete from input where id in (select input from "functionCall" where function=(select id from function where text='hexdec') and input in (select input from "functionCall" where function=(select id from function where text='hash')) and input in (select input from "functionCall" where function=(select id from function where text='substr')) and input in (select input from input_src where raw like '%$roll_colour = %' and raw like '%server_seed%'));
SjonHortensius commented 1 month ago

also referenced on https://empiredrop.com/verify-provably-fair