Be careful when using GPBets.com

You don't know a thing about what you're talking about. Poker Mavens doesn't have a security problem, the developer made a security problem and it's low priority on Astrola's mind to get it fixed.

 

tantansage, just wait until you're hacked and then we'll see what kind of security problems lie below the surface. You sheeple never see what's wrong with it until it's too late.

 

^ Do they give these ranks to just anyone or are you just a faggot?

<3

 

The fact that I am associated with this means it will get handled. The fact that i don't buy into your conspiracy theory does not make me a sheep. The possible exploit you have shown us will be corrected. That is all there is to it.

It would be more productive instead of you only telling me that we aren't going to do anything about it. Give advice on methods to improve the security that you think is to weak to be released publicly.

Thank You,
w22.

 

lol dont listen to dialatic hes a fucking moron

he doesnt even know php he bought his rank from govind for $20

gpbets is the best site and I've signed up multiple accounts with every single password i use

 

It isn't his second website it is his third. MMObets, velocitybets, and gpbets were all either his sites or sites he helped run. I have kind of lost track of which ones he was kicked off of and I've lost track of how many times he's been banned. I'm actually surprised they unbanned him after what happened last time. If he really is reimbursing people for their chip ranks or whatever that's fine but i am staying far the fuck away from his forums.

 

You probably don't know anything lol. I've spoken to Astrola privately, and he isn't the least bit concerned, so I let the users know.

 

stop leaking lol... that was private mod material

 

tantan I also don't know who the fuck you are so there's that...

 

Astrola is dedicated to his forums from what I can see.
Although he's not that bright on stuff like this and has bad english.

Hopefully he can clear it up

 

I've done over 100b worth of business on this site, and not my problem you don't know who I am. We all get that you had a conversation with astrola a week ago. But you fail to acknowledge the issue is being fixed.
Its clear you want to attack anyone that has a different view than you but i do not think this is the most productive method of help.

Edit: Also before you keep making things up. Where was it implied that there was no intent to fix this error.

 

No, I just don't have any respect for anyone who would knowingly put their users at risk. I'm not attacking anyone with a different view: I'm pointing out facts. The fact is that this is a major security problem, and it hasn't been fixed.

He implies it when I spoke with him, as well as him saying "it's only an issue if he's hacked", which seemingly implies that he doesn't care because he thinks he's immune to hacks. And not to mention I gave him 7 days to fix it before posting about it and nothing has changed.

 

OK so you have him quoted saying hes working his his developer. You are aware he does not do the coding himself and is in the process of fixing the problem that you brought up. As for him telling you that this would only be an issue if it were somehow compromised by a third party is just the reality of the situation. It does not imply that he is going to do nothing about it.

As i said before we are ALL now aware of the security risk and will do our best to fix it in a timely manner.

 

By the way, the fix is literally changing the word "GET" to "POST" in the form method attribute, and then changing $password to $encryptpassword and using some type of encryption method on $encryptpassword. It takes a while 2 minutes, which is why I'm amazed it hasn't been done yet.

You guys need a new developer. I'm sure anyone would be happy to do the work for you guys, considering the obvious oversight in quality.

 

I've done 100b worth of coke on Sythe.

 

Help me! I'm seeing things.

 

A whole 100b?! You must be a legend around these parts now. Everyone knows once you hit the 100b mark you're extremely respected, no matter if it's Runescape gold or coke.

 

On another note, you certainly didn't get many vouches for that 100b you've traded here.

 

Don't you get a minirank automatically once you hit the 100b mark?

 

Nope, but I made a suggestions about it. Richard said if I sucked his dick. Nero don't suck no man's dick. Only women's.