If you visit the direct link: http://www.getmagicnow.com/access.php without adding an email address it still says that "You've been placed on the waiting list!". Simple error, but easy to fix so there is no confusion. Great service!
Payment pages should really be linked to an order ID of some sort, without which customers shouldn't be allowed to pay. Otherwise, lots of things can go wrong. Depending on how they have configured things on the server side, a customer could change the amount being paid and the system would consider the ticket paid, cheating them out of money. Or a customer could follow an old link and wind up paying twice if they thought it didn't go through the first time.
I'm not joking, click on it and try to pay. It shows an invoice of ($5,000), a.k.a. $5000 negative dollars. I didn't enter real payment information to see what happens next because of really idiotic interpretations of what constitutes "hacking", but it is a really bad design choice on their part that took me about half a second to find.
Founder, if you're reading this: was this an in-house build or did you outsource this?
The answer is probably they spent around two days building this before demand grew left them zero time to improve infrastructure. Which is more or less good.
Less good? Infrastructure breaking because of load is one thing (concurrency/DB issues) but nothing like this should ever be exposed to the user on general principle.
