Author

Topic: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook (Read 2819 times)

legendary
Activity: 966
Merit: 1000
no clue if i won or not no results show
sr. member
Activity: 518
Merit: 250
Did any of you guys end up having luck with your bets?

bump

Nothing graded as of yet, I don't tend to think this guy is a scammer as it appears he has worked hard on site, but I don't think he is ready for what it's going to take yet to operate against the other books.

Yeah- there wouldn't be much point in scamming free money either. A scammer would be on top of the beta test to get people excited then get shady after people started depositing.
sr. member
Activity: 518
Merit: 250
Did any of you guys end up having luck with your bets?

bump
sr. member
Activity: 518
Merit: 250
Did any of you guys end up having luck with your bets?
legendary
Activity: 966
Merit: 1000
so does that mean i won or loss i did a random bet
sr. member
Activity: 518
Merit: 250
i bet
29 Aug 2013 12:05:40   Straight   .1 BTC   0.115 BTC   2013-08-29 17:05
Oakland Athletics @ Detroit Tigers
LINE: -1.5 115
Result: N/A



Yeah, there definitely should be a result- game ended 6-7 .Detroit won.
legendary
Activity: 966
Merit: 1000
i bet
29 Aug 2013 12:05:40   Straight   .1 BTC   0.115 BTC   2013-08-29 17:05
Oakland Athletics @ Detroit Tigers
LINE: -1.5 115
Result: N/A

sr. member
Activity: 518
Merit: 250
I've got my bets placed on a few games tonight. Will see how it goes and report back. Smiley
i place a bet on a game yesterday still no credit whether i won or lost

What did you bet on? Perhaps you made the same mistake as me. I thought I was betting on games tonight but turned out to be games tomorrow. haha. I was mistaken because the time on the site doesn't match my local time. Tongue
legendary
Activity: 966
Merit: 1000
I've got my bets placed on a few games tonight. Will see how it goes and report back. Smiley
i place a bet on a game yesterday still no credit whether i won or lost
sr. member
Activity: 518
Merit: 250
I've got my bets placed on a few games tonight. Will see how it goes and report back. Smiley
legendary
Activity: 966
Merit: 1000
Sounds like you are over your head and not around enough.

I'm around. Trying to fix the issues. One more week until NFL season starts and things should be running smoothly. Did not anticipate the amount of hiccups. Things will get rolling smoothly coming opening day of the NFL season.
my bet is still being not finshed yet the game finshed yesterday
newbie
Activity: 14
Merit: 0
Sounds like you are over your head and not around enough.

I'm around. Trying to fix the issues. One more week until NFL season starts and things should be running smoothly. Did not anticipate the amount of hiccups. Things will get rolling smoothly coming opening day of the NFL season.
hero member
Activity: 602
Merit: 500
Acc bought - used solely for signature testing
Sounds like you are over your head and not around enough.
legendary
Activity: 966
Merit: 1000
Guys email him he will reply within 24hrs
hero member
Activity: 602
Merit: 500
Acc bought - used solely for signature testing
My account is kingofsports for the .1 BTC to be added. Thanks and look forward to trying the site out.
full member
Activity: 140
Merit: 100
Hi, I deposited and I am unable to withdraw. Also never received .1

I messaged you.
Icecube, same I account as here
I PM'd you also.
Still unable and never received the .1 Sad
full member
Activity: 140
Merit: 100
Hi, I deposited and I am unable to withdraw. Also never received .1

I messaged you.
Icecube, same I account as here
I PM'd you also.
newbie
Activity: 14
Merit: 0
Review

A well-designed site, but there are many issues.

First the big stuff

CSRF vulnerability

There is a major CSRF[1] vulnerability in various parts of your website. A malicious attacker can exploit this vulnerability to steal funds from bettors. Please PM me if you need any more information on this issue.

Most visible is the withdrawal script. An attacker can update the withdrawal destination and withdraw arbitrary amounts from user balance. A malicious webpage contains two inline frames, one of which updates the withdrawal address through a POST to http://ebitcoinbetting.com/account.php?id=2&a=1, and the other which withdraws money through another POST to http://ebitcoinbetting.com/account.php?id=2&a=2.

As far as I can tell, this isn't a problem with the password change form because the old password is required. This is also not likely a problem with betting, as there is a confirmation screen for that. Confirmations screens are generally poor at solving CSRF attacks, however, and care should be taken.

(On a related note, withdrawal does not currently work. The error given is:)

Quote
Catchable fatal error: Object of class mysqli_stmt could not be converted to string in /home3/dokula/public_html/ebit/account.php on line 186


Some thoughts

Combined login/register

The combined login/register form is a bad idea. When I went to log in, I had to scroll down to see the “Login” button and initially thought I should fill my information in the upper form, which was instead for “Register”ing.

Logo discrepancy

The logo, which says “EBitCoingBetting”, is confusing. The site's name is given elsewhere as “EBitcoinBetting”, without the “g” that follows the “Bitcoin”. Regardless of whether this is an error or an intentional discrepancy, it is a source of confusion. Brand should be unified, even if the difference is only a “g”.

Cosmetic balance display issue

On two separate occasions, the “Balance in use” shows nothing when no balance is being used. See: https://i.imgur.com/3bB0NsB.png and https://i.imgur.com/YX8jDN0.png.

Username issue?

On the deposit page, my username is displaying thus:
Quote
Hey, l3jNF!

The username I signed up with is not l3jNF. I'm not sure what this is. Perhaps this is intentional, but clarification would be helpful if that is the case.

Bet sizes

The minimum bets for all the ones I can see is 0.21BTC. Not sure if this is intentional, again, but it certainly makes testing the bet system hard, since we only have 0.1BTC to work with...

All of these have been fixed as well. Amazing write up! Thank you!
newbie
Activity: 14
Merit: 0
Thanks,

Was able to reset my password, via the email verification link.

Site is a little hard to navigate around and I had to look for Football then click NCAA to make some bets.  Also not a very good checkout area, errors and errors trying to get a parlay to work, 

Minimum Bet: .21 BTC
Maximum Bet: .24 BTC
Incorrect table name ''349


What I did like it had the old parlay feel, I remember 25 years ago being 10 picking my 11 teams on my Dad's slip he was going to play for me for $1, but when i got to be 20 I realized it was a rouse and no 10 year old could pick a 11 teamer with odds.  But I remember doing that though.

I tried and was unable to make my bets on a 4 team parlay

I want play the full 0.10 BTC on
South Carolina ML -530
SMU H:5 -106
LSU ML -180
FSU ML -371

I will try again tonight and hopefully be back before kickoff tonight, or if you can get in put in that would greatly be appreciated.




All of these issues have been fixed. Let me know if you cannot place the bet, then I will do it myself.
legendary
Activity: 1246
Merit: 1077
Review

A well-designed site, but there are many issues.

First the big stuff

CSRF vulnerability

There is a major CSRF[1] vulnerability in various parts of your website. A malicious attacker can exploit this vulnerability to steal funds from bettors. Please PM me if you need any more information on this issue.

Most visible is the withdrawal script. An attacker can update the withdrawal destination and withdraw arbitrary amounts from user balance. A malicious webpage contains two inline frames, one of which updates the withdrawal address through a POST to http://ebitcoinbetting.com/account.php?id=2&a=1, and the other which withdraws money through another POST to http://ebitcoinbetting.com/account.php?id=2&a=2.

As far as I can tell, this isn't a problem with the password change form because the old password is required. This is also not likely a problem with betting, as there is a confirmation screen for that. Confirmations screens are generally poor at solving CSRF attacks, however, and care should be taken.

(On a related note, withdrawal does not currently work. The error given is:)

Quote
Catchable fatal error: Object of class mysqli_stmt could not be converted to string in /home3/dokula/public_html/ebit/account.php on line 186


Some thoughts

Combined login/register

The combined login/register form is a bad idea. When I went to log in, I had to scroll down to see the “Login” button and initially thought I should fill my information in the upper form, which was instead for “Register”ing.

Logo discrepancy

The logo, which says “EBitCoingBetting”, is confusing. The site's name is given elsewhere as “EBitcoinBetting”, without the “g” that follows the “Bitcoin”. Regardless of whether this is an error or an intentional discrepancy, it is a source of confusion. Brand should be unified, even if the difference is only a “g”.

Cosmetic balance display issue

On two separate occasions, the “Balance in use” shows nothing when no balance is being used. See: and .

Username issue?

On the deposit page, my username is displaying thus:
Quote
Hey, l3jNF!

The username I signed up with is not l3jNF. I'm not sure what this is. Perhaps this is intentional, but clarification would be helpful if that is the case.

Bet sizes

The minimum bets for all the ones I can see is 0.21BTC. Not sure if this is intentional, again, but it certainly makes testing the bet system hard, since we only have 0.1BTC to work with...
newbie
Activity: 14
Merit: 0
We have awarded the following players with .1 BTC:

Quote
mscharleneb
uvwvj
dree12
KingOfSports
HollowIP
bitcoinsrock
spurs32
cparsley
Icecube
rogerto

We decided on the picking the players that have contributed the most to Bitcointalk.org community. We've messaged whoever did not list their username. You are can pick any bet and your winnings + risk will be rewarded. We will not withdraw the credited BTC if it has not been used to place on a bet. Please let us know if you have any questions and don't hesitate to report and bugs or things that we can improve on. Good luck!

EBitcoinBetting.com
member
Activity: 98
Merit: 10
Hi there,
I'd be interested in beta testing for you.

I just registered.

Username: mscharleneb

Please keep us posted on any future updates regarding the site launch or anything of the like.

Best of luck with your new website! Smiley

Kind regards,
Charlene


To EbitcoinBetting,
I was never credited either. Please see my first post to this thread above.

I'm looking forward to betting on your site Smiley
newbie
Activity: 14
Merit: 0
Hi, I deposited and I am unable to withdraw. Also never received .1

I messaged you.
full member
Activity: 140
Merit: 100
Hi, I deposited and I am unable to withdraw. Also never received .1
newbie
Activity: 14
Merit: 0
I'm here, we're just fixing some hiccups! I will award you guys with .1 later on tonight. Just gotta fix some of the little annoyances.
legendary
Activity: 966
Merit: 1000
idk i was credited and bet and waiting for the money to come to my wallet
also his email might be best to contact him
full member
Activity: 140
Merit: 100
i was credited and i withdrew some still waiting for the btc to come to my blockchain wallet
He hasn't been on since 8/24.
legendary
Activity: 966
Merit: 1000
i was credited and i withdrew some still waiting for the btc to come to my blockchain wallet
full member
Activity: 140
Merit: 100
Well, that's today
legendary
Activity: 966
Merit: 1000
i read the part about the credit to the website and my balance on there is 0.00btc

Dude, read.


I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.


i have pmed him my username dude

You still aren't reading. August 28th! today is the 23rd.
oh shit didnt see that date thanks
sr. member
Activity: 518
Merit: 250
i read the part about the credit to the website and my balance on there is 0.00btc

Dude, read.


I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.


i have pmed him my username dude

You still aren't reading. August 28th! today is the 23rd.
legendary
Activity: 966
Merit: 1000
i read the part about the credit to the website and my balance on there is 0.00btc

Dude, read.


I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.


i have pmed him my username dude
sr. member
Activity: 518
Merit: 250
i read the part about the credit to the website and my balance on there is 0.00btc

Dude, read.


I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.

legendary
Activity: 966
Merit: 1000
i read the part about the credit to the website and my balance on there is 0.00btc
sr. member
Activity: 518
Merit: 250
i think this is a scam i still have not been credited the promised .1btc

Perhaps you should read the OP then again.

[edit: please, read more carefully instead of just looking for a handout every which place]
legendary
Activity: 966
Merit: 1000
i think this is a scam i still have not been credited the promised .1btc
sr. member
Activity: 295
Merit: 250
I tried to deposit but it said invalid address.
newbie
Activity: 22
Merit: 0
I'm also interest in the beta test. Hope I'm not late either. Username is jumplove
member
Activity: 91
Merit: 10
signed up, hope im not too late

thx

sr. member
Activity: 295
Merit: 250
Got this message
Quote
Fatal error: Call to undefined function dec() in /home3/dokula/public_html/ebit/index.php on line 32

I'd like to test it if there is still room left.
newbie
Activity: 27
Merit: 0
Registered as rogerto!

thnx
legendary
Activity: 1246
Merit: 1077
Signing up if there's still room. (dree12 is username)
full member
Activity: 215
Merit: 100
ILL Test.. lets rock n roll
hero member
Activity: 896
Merit: 501
full member
Activity: 140
Merit: 100
I'll help test Smiley Signed up
legendary
Activity: 966
Merit: 1000
just registered
the deposit adress is 1JJDW68Awqy9z1rFjVzTohcKvC94t34Dc2
cant wait for the .1btc
sr. member
Activity: 518
Merit: 250
member
Activity: 98
Merit: 10
Hi there,
I'd be interested in beta testing for you.

I just registered.

Username: mscharleneb

Please keep us posted on any future updates regarding the site launch or anything of the like.

Best of luck with your new website! Smiley

Kind regards,
Charlene
hero member
Activity: 602
Merit: 500
Acc bought - used solely for signature testing
I'll beta test it. PM me with what you would like me to try out.
newbie
Activity: 14
Merit: 0
We have just finished the final touches on the website and would love to get some feedback from users that actually have experience in betting with bitcoins.

My offer:
I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.

The .1BTC will be offered as a betting credit on the website. You win, you get paid and are able to withdraw. You lose, you are outta luck. I will send out the emails on the opening day.

I would love to hear about your experience (positive or negative), any bugs, recommendations or comments that you can possibly think of things that we can fix.

Would love to hear from you guys. Hope we can be your sportsbook of choice in the near future!

http://EBitcoinBetting.com
Jump to: