[ANN] Hey, BitMe! (#bitme)

[freewil]

1/ layout/cosmetic:
The 'Place Order' blue button is overlapping on the next column (in Google Chrome, Win XP)

This is really just poor design  , someone already pointed this out to me, I'll put it under "known issues"

2/ authentication
Login (either as Demo user or regular user) just fails for me in IE8.   'There was a problem logging you in, please try again'

Confirmed, I'm classifying this as minor, 10BTC

[flatfly]

1/ layout/cosmetic:
The 'Place Order' blue button is overlapping on the next column (in Google Chrome, Win XP)

This is really just poor design  , someone already pointed this out to me, I'll put it under "known issues"

2/ authentication
Login (either as Demo user or regular user) just fails for me in IE8.   'There was a problem logging you in, please try again'

Confirmed, I'm classifying this as minor, 10BTC

Received already! Thanks.

[whiskers75]

Ok what about the notice with USD saying:
The maximum amount is 500.0
Shouldnt that be:
The maximum amount is 500.00USD?
One decimal place seems wierd :\

boy, this is some real low-hanging fruit here - especially since this is a feature only specific to testnet. Ill send you 2 BTC for this.

Wow, thanks a lot!!

[flatfly]

if, by mistake, or due to network congestion, one double-clicks (or more) on the deposit button, the deposit is performed twice (or more) - this is perhaps true of withdrawals too.

[whiskers75]

Why can't we deposit cents?

Deposit 0.25 USD:

Amount must be at minimum 1.0

[freewil]

if, by mistake, or due to network congestion, one double-clicks (or more) on the deposit button, the deposit is performed twice (or more) - this is perhaps true of withdrawals too.

Perhaps a bit of js magic to prevent double submission? 2 BTC

[freewil]

Why can't we deposit cents?

Deposit 0.25 USD:

Amount must be at minimum 1.0

This is a testnet-only feature. It's just an arbitrary minimum amount.

[flatfly]

if, by mistake, or due to network congestion, one double-clicks (or more) on the deposit button, the deposit is performed twice (or more) - this is perhaps true of withdrawals too.

Perhaps a bit of js magic to prevent double submission? 2 BTC

Yeah, disabling the submit button on onclick or something

Thanks!

[nathanghart]

I was able to deposit a fraction of a USD.

1.001

[nathanghart]

I tried to withdraw money less than what was deposited and got an error that I did not have enough funds. I cancelled all pending transactions, so the money would not be tied up.

[freewil]

I was able to deposit a fraction of a USD.

1.001

Expected behavior, again this is just a testnet feature to deposit arbitrary amounts of USD.

[freewil]

I tried to withdraw money less than what was deposited and got an error that I did not have enough funds. I cancelled all pending transactions, so the money would not be tied up.
https://imgur.com/1OsY9

If you want to Withdraw BTC you'll have to buy or deposit some first  

[flatfly]

if, by mistake, or due to network congestion, one double-clicks (or more) on the deposit button, the deposit is performed twice (or more) - this is perhaps true of withdrawals too.

Perhaps a bit of js magic to prevent double submission? 2 BTC

Yeah, disabling the submit button on onclick or something

Thanks!

Hi Sean, it seems I haven't received that last bounty, could you check please?
Thanks

[freewil]

Hi Sean, it seems I haven't received that last bounty, could you check please?
Thanks

My bad, sent!

[flatfly]

Hi Sean, it seems I haven't received that last bounty, could you check please?
Thanks

My bad, sent!

Excellent, thanks!

[nathanghart]

I tried to withdraw money less than what was deposited and got an error that I did not have enough funds. I cancelled all pending transactions, so the money would not be tied up.
https://imgur.com/1OsY9

If you want to Withdraw BTC you'll have to buy or deposit some first  

That's expected then, since you are on testnet. I Thought it might count the test funds in there. Notice where I was withdrawing to?

[fornit]

when submitting empty fields, you dont just get the empty field error message, but all other possible error messages, too.

instead of using javascrpt to disable a button i suggest using a token to prevent multiple form submits, also for preventing csrf. google synchronizer token pattern and/or read this:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#General_Recommendation:_Synchronizer_Token_Pattern

[freewil]

I tried to withdraw money less than what was deposited and got an error that I did not have enough funds. I cancelled all pending transactions, so the money would not be tied up.
https://imgur.com/1OsY9

If you want to Withdraw BTC you'll have to buy or deposit some first  

That's expected then, since you are on testnet. I Thought it might count the test funds in there. Notice where I was withdrawing to?

Huh? You only had USD in your account, not BTC. That's why you aren't able to withdraw any. The purpose of the fake depositing in USD is to test the execution and execution interface.

[freewil]

when submitting empty fields, you dont just get the empty field error message, but all other possible error messages, too.

instead of using javascrpt to disable a button i suggest using a token to prevent multiple form submits, also for preventing csrf. google synchronizer token pattern and/or read this:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#General_Recommendation:_Synchronizer_Token_Pattern

Thanks for the suggestion. I'm already using CSRF tokens, but am only generating once per session. As the article points out well, you can generate once per request, but this introduces some usability issues if the user opens multiple tabs for instance. I'm still on the fence about this.

[Anduck]

Yes, javascript should never add features to the system. JS should be used to cosmetical things or to make some features easier to use. Therefore the javascript-method to disable multiple form sending is bad method. Should be done with confirmation page or something like that.

Also when you're adding an order, it should classify what went wrong if an error occurred in order placement (instead of "An error occurred!").

Turned javascript off after loading dashboard page, then clicked on Orders->New and it threw to Error 404 -page.