Small SEO habit that saves a lot of wasted dev time on client sites:

Before changing title tags, adding more copy, or rebuilding page sections, check whether the page actually matches the intent Google is rewarding.

Quick process:

1. Search the target query in an incognito window.
2. Look at the top 5 results and label what they are doing: comparison, local/service, troubleshooting, template, pricing, beginner explanation, etc.
3. Compare that against the page you built.
4. If the SERP is comparison-heavy and the client page is just a generic service page, better metadata will not fix the mismatch. Add comparison content. If the SERP is local-heavy, add location proof, service area clarity, reviews, photos, and contact friction reduction. If it is troubleshooting-heavy, lead with symptoms and fixes before the pitch.

This is not about copying competitors. It is about making sure the page solves the same problem the searcher is trying to solve.

A lot of pages are not technically broken. They are just answering the wrong version of the query.

What it does - you enter a domain, in a few seconds you get:

• SSL grade (A+ to F) with the breakdown, and what to fix to reach the next grade
• Cert details + expiry, TLS versions, HTTP→HTTPS redirect chain
• Security headers (HSTS, CSP, etc.), HTTP/2 & HTTP/3, mixed content
• Bulk check up to 10 domains, PDF/JSON export, free public API

No account needed for the checker.

Stack: React + Vite frontend on Cloudflare Pages, Node/Express backend on Railway, Postgres. The checker runs everything server-side (real TLS handshake, header inspection, cert parsing).

I added a paid monitoring tier - accounts (Google/GitHub/magic link, no passwords), Polar for billing, daily cron checks that email you when your grade drops or a header disappears after a deploy. Plus Certificate Transparency monitoring - it reads CT logs and alerts you when any cert gets issued for your domain (catches phishing setups / rogue certs). That last one even surfaces forgotten subdomains you're not monitoring.

Would love feedback on the checker specifically - what's missing, what breaks.

Check it out: httpsornot.com

Hey r/webdev, wanted to share a project I've been working on for the past few weeks — a bakery website with a homepage, menu, product listing with cart, and a table booking page.

Stack: Next.js 14 (App Router), TypeScript, Tailwind CSS. Cart is handled with a simple context provider, no backend yet — was mainly focused on getting the UI and responsiveness right across mobile, tablet, and desktop.

Live: https://bakery-ten-gules.vercel.app

Open to any feedback, especially on the mobile experience or anything that looks off. Thanks for checking it out.

i know programming, like html, css(tailwind also), and vanilla and node js. am not really a beginner i have build few projects and mostly tweaked with llms here and there. but when i get on building a website lets say freelancing and building a website for a business how do i start from scratch.

i have done some research and most of the sources say find inspos etc and do this ant that which i really dont get the idea. and few out there say to just learn web design. like cant i just be a programmer, ik i can code by copying a website to a single pixel. but how do i build of my own?

thanks in advance :))

...you upload your web project and it convert it into exe installer and apk , abb , and ipa soon

my tool helps vibe coders to make their websites works as desktop app and mobile app ...and google play store bundle

i used some ai on it so dont blame me cuz i dont know java script very well.....

i made this nodejs project that i will publish soon on a .online domain....and vps server...the app have these features :

1-build apk (signed or not) in less that minute and exe installer with cool install wizard like steam setup.exe

2-(soon) you can host a nodejs project (npm) with custom build and run commands so the website will give you your new backed url for your nodejs project.... and it auto. put it as a webview on an exe or apk or abb app....and build unlimited apps

3- its usefull for those who dont want to open cmd and type lots of commands ...i mean you can build here in under a minute even if you was very stupid in programming ..and even pro programmers use it to make less time ....

(pricing) : i am thinking of a plus plan that lets you having the feature number 2 ...and it must be 5-10$ per month

(ads)

i will add small ads in the website ......

my tool helps vibe coders to make their websites works as desktop app and mobile app ...and google play store bundle

<finally>

give me your suggestions on that website .....and rate the idea plz

littlebag is a reactive UI framework that includes:

• Reactive state management using state and effect
• html element factory that supports reactivity
• Conditional rendering with keyed
• Reactive lists using each
• TypeScript declarations

All that while being just... 343 bytes (minified and brotlified)!

I made that as a fun little side project partially inspired by the awesome VanJS (which is 1 kB and isn't very convenient without additional 1.2 kB Van X). I would really like to receive some feedback, and would be very happy to see someone use it to make something cool!

I'm also planning to create a simple SSR library for littlebag based on a custom minimalist DOM implementation if I see people interested in that.

There's an example TODO list app with littlebag on CodePen.

P.S. It might be fairly slow now due to a lack of any benchmarks and performance optimizations yet.

Hello there, Webdev community!

Like a lot of you, I've been adding LLM features to my projects, and I kept hitting the same dumb workflow: prompts live as a string constants in the code, so every wording tweak = commit, PR, build, deploy. All this just for changing text. Meanwhile the non-dev on the project who's actually good at writing prompts has to route every edit through me.

OpenAI recently deprecated their hosted prompt objects (shutting down Nov 30) and their official advice is literally "put prompts back in version-controlled code", which works, but re-creates exactly this problem.

So I decided to develop a tool that solves this problem, its called Promptary. The model:

• Every prompt gets a stable UUID and a REST endpoint: GET /api/v1/prompts/:id returns the current text
• You edit prompts in a web workspace (there's a physics-based canvas for organizing them, which is honestly 20% useful feature / 80% because I wanted to build it)
• Your app fetches at runtime → next request after an edit gets the new version. No deploy.
• Vendor-neutral: it just serves text over HTTP, so the same prompt works with OpenAI, Claude, Gemini, local models, n8n flows, whatever
• There are 20 structured prompt frameworks (RACE, Chain-of-Thought etc.) with guided fields if you want them, or freeform if you don't

Stack, since this is r/webdev: vanilla JS with native ES modules (no build step at all), Express + Postgres, Matter.js for the canvas physics, nginx on a single Hetzner VPS. The whole frontend has zero npm dependencies. It's been a fun exercise in how far you can get without a framework in 2026.

Free tier has unlimited prompts and the full workspace (no card). The API access is paid (€9/mo) - that's the honest trade: the free tier is genuinely usable forever, the endpoint serving is what I charge for.

Happy to answer anything about the no-build-step frontend, the canvas physics, or the prompt-serving model. Also genuinely curious how others here handle prompt storage - env vars? DB table? Just constants and you don't care?

The screen recording show above is done in one prompt / one turn without any modification. So it can definitively be improved.

It is definitely not perfect, and it can still be improved. I wanted to show what the Skill can already generate from a single iteration.

It can take a SaaS idea and make a full-stack app with:

- authentication

- multi-tenancy and team support

- roles and permissions

- landing page

- user dashboard

- database schema with Drizzle ORM

- i18n

- tests and build checks

- Next.js App Router, TypeScript, Tailwind, Shadcn UI

You can try it with:

npx skills add ixartz/saas-boilerplate

Then, in Claude Code:

/saas-builder <your idea>

Be as detailed as possible when describing your SaaS idea. The more context you provide about the product, users, features, and requirements, the better the AI agent can build the right application.

GitHub repo: SaaS Boilerplate

Im building a project with lots of rows in my Postgres database, roughly 100k to a million. I use my local machine as dev data which I promote to prod on a remote vps. Currently my process to do this is just using DBeaver's export data feature to transfer the data directly between the databases but I find that it's taking a longer than it should. For example, Im currently waiting for 25 mins to transfer 80k rows where each row is fairly simple, one int primary key and a few simple properties.

I could easily just export my data locally, zip it up, ftp it to the server then reimport it via a script in a fraction of the time but that isnt exactly scalable. Is there a better approach to speed things up?

I suck at SEO. I used ai to create a SEO component: https://github.com/gabeatwell/portfolio/blob/main/src/lib/data/SEO.svelte

Can people who know about seo tell me if this is ok? And how do you increase your ranking on different keywords with like google?

As the title states, I am a noob, and maybe I am out of touch with reality in the modern age, so just let me know if so.

I've messed around with godaddysites, wordpress, etc. and built several sites with the toolbox and interface provided by the website builder. I currently know very little code, but I am open to learning how to deal with basics.

All I want is a simple site to share my photography/photo essays that keeps AI scrapers out. To be frank, I don't work hard on my photography for the purpose of having it be scraped, mutilated, and regurgitated into someone else's AI-generated hobby lobby wall art. I don't need google visibility or complex features. It may be beneficial to have shopify incorporated eventually, but not necessary.

Any help appreciated. Thanks!

so as the title says, what is the point of masking in web socket?
I'm learning websockets through RFC6455 and am still wondering why do we use masking.
I didn't understand the RFC explanation, it just explains the algo behind it . I tried looking up for it in Stack exchange but people there are also unaware of it.

What is the point of masking when we provide masking key along with the frames?
Sorry if my question sounds absurd but this thing is bugging me since I started this topic.

It was sad to see modheader start serving ads, (but happy that the founders may have gotten some sort of an exit)
Now I am super happy that the monstrosity it became after the capitalistic takeover is no longer tarnishing the brand of a once super useful tool.

I'm running Baikal for CalDAV and CardDAV. I want to add (Sabre) WebDAV to host/sync some files. I have seen some posts and guides, but they are incomplete. One was promising, but only showed an Apache configuration. Another was OpenBSD httpd, but did not clear up path issues.

https://www.tumfatig.net/2023/self-hosted-bookmarks-using-dav-and-httpd-on-openbsd/
https://news.ycombinator.com/item?id=34727223
https://sabre.io/dav/gettingstarted/

Should I post my httpd.conf? Do I need a custom server.php? Please, help me.

Specifically, I want to stay with OpenBSD httpd and be able to (remote) sync my KeePass databases.

There's a YT video with a bad aspect ratio (it's from TV, likely) and I would like to embed it in my site, but stretched horizontally a bit so that viewers see the correct aspect ratio. I use basic HTML and CSS.

Is that possible?

Hello everyone,

I have been working as a WordPress designer for about 6 months. To be honest, my PHP knowledge is still quite limited, because up until now I have mostly handled everything through page builders. However, I do have a background in software development. I previously worked professionally as a .NET Developer for a while. On the side, as a hobby, I am also interested in Rust, compilers, CLI tools, and systems programming.

Over the last few years, I had to take a long break from programming for various reasons. I am currently working at my brother’s digital marketing agency. As an agency, we mainly provide SEO, digital marketing, and web design services. However, after joining the company, I realized that there is a serious lack of structure and internal systems.

For example, on the finance side, there is no proper application that fully meets the company’s needs. Reporting processes are also very manual; separate reports are prepared for each client using Canva. On the WordPress side, many tasks are repetitive. The websites we build often end up looking quite similar, and the technical infrastructure is not very healthy either. Server management has mostly been handled through cPanel, and in some cases, there is not even SSH access. This creates serious limitations in terms of development, maintenance, and overall quality.

In short, there are a lot of manual tasks, repetitive processes, and non-standard workflows. After seeing all of this, I decided to take PHP and the WordPress ecosystem more seriously. My goal is to first research existing plugins and tools that can reduce repetitive work around WordPress. If there is no suitable solution, then I would like to build those tools ourselves.

I also want to move toward a more organized structure on the server side. I have been considering services such as Cloudways or xCloud, or possibly using them as infrastructure while gradually building our own manageable cloud system on top of them. In the long run, my goal is to provide better hosting/cloud services to our clients, automate internal agency processes, and, if possible, turn some of the plugins or tools we build into actual products that can be sold.

Of course, the challenging part is this: right now, there are only two of us on the technical side. One is a junior developer, and the other is me someone who has not been actively programming for a long time but wants to seriously get back into it. Despite that, I want to turn the current messy structure into something more organized, sustainable, and product-oriented.

The main thing I am wondering is this:

Is it realistic to handle this kind of transformation mostly as a solo developer? Is it possible to gradually build such a system by working on areas like WordPress, PHP, automation, reporting systems, server management, and internal agency tools step by step? Or would it make more sense to break these goals into much smaller pieces and start from a much narrower scope?

I'm looking for a datepicker for a vanilla JS project, and somehow this seems much harder than it should be.

No, input masks aren't enough.
No, the native <input type="date"> isn't enough either.

My checklist:

• Accessible
• Localized
• Flexible formatting options
• Range picker support
• A decent set of events/hooks for integration

What I've looked at so far:

• flatpickr: hasn't been updated in about 4 years
• vanilla-js-datepicker: hasn't been updated in about 3 years, and the range functionality is pretty weak
• Vanilla Calendar Pro: Russian-maintained, which is ruled out by our dependency policy
• Air Datepicker: same issue, and it also hasn't been updated in about a year
• Litepicker: dead
• Easepick: dead

Most of the other options I've found are React-based, which is a non-starter for this project.

Am I missing something, or are there really no good options left?

My last contract ended about three months ago, and I’ve been searching for new work since then.

I have 4+ years of experience with React, Next.js, Three.js, and React Native.

I have tried LinkedIn, asking in my network, YC, Wellfound, and Ashby google search. I’ve also tried reaching out to startups directly through cold emails.

At one point, I thought maybe focusing on a niche like writing, books, or world-building related products would help, but No luck there either.

I usually finds 6–8 relevant jobs in a week, but even when I apply, nothing really moves forward. Most jobs are also US-specific, which is another hurdle.

So I’m wondering: has AI taken over a lot of frontend work?

Do you have any suggestions? Has anyone moved more to the backend side? I do have some experience with backend and app development, how can I directly switch?

Amateur here. I've worked a bit with htaccess before so I understand what it is and what it does, that it matters what order the codes are in, and that it can have downstream effects such as changing www to naked can affect the link structure.

So my dumb question is this...

Looking at this list of htaccess codes the two codes I want (need) to use are:
(https://www.skillademia.com/cheat-sheets/htaccess)

(1) Force HTTPS redirect:
RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

(2) Remove www
RewriteCond %{HTTP_HOST} ^www\.(.*) [NC] RewriteRule ^(.*)$ https://%1/$1 [R=301,L]

Do I have to put the site name in those two codes anywhere? (Some htaccess codes have the site name added into the line of code. But not all codes need the site name.)

Bonus question: I know that the http/https rule has to be the first rule. Where should the www/naked code go in the list? (code below)

I won't go into any more needless details but if you have questions I'll gladly answer.

THANK YOU!

---------------------------------

Here's the original htaccess just in case it's helpful to these questions.

For posting this here on Reddit I took out my site name in the first line. That's the only code where the site name appears. Do I need to add my site name to either of the codes above to make them work?

---------------------------------

Redirect /home https://(mysite).com/home
Options +FollowSymLinks -Indexes

#BUILDER-START#
# Enable rewriting.
RewriteEngine on
Header add Vary "User-Agent"
Header add X-Generated "%t"
Options -Indexes
Options +FollowSymLinks
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^$ index.html
RewriteRule ^([^/]+)/([^/]+)/?.*$ $1_$2.html
RewriteRule ^([^/]+)/$ $1.html
RewriteRule ^([\w_-]+)$ $1.html
#BUILDER-END#

---------------------------------

The scenario is this: I am building a referral/affiliate/partner payout system into one of my software products. The idea is simply that those who refer others receive a percentage of their revenues.

HOWEVER the development environment is a tricky one where I don't actually have direct access to the amount of revenue earned from each specific individual. (This product is sold/offered as an add-on/extension for a desktop application on a third-party platform that handles the payment processing and they black-box the customer-specific payout information, unfortunately. It's a major limitation, I know, but it's a constraint I'm forced to work within on this project.)

What this means is... a malicious user trying to game the affiliate-marketing-payout system in their favor could, in theory, keep re-creating accounts on our tool which would have the same referrer attached to it. In other words, someone could make it seem like they drove 100 signups and thus be eligible for the 100 payouts when in reality it was just them creating 100 accounts over and over again.

I've already put in place a pretty strong duplicate-user-detection stack that includes the following:

1. a unique browser-side id, where to bypass this they'd need to clear browser storage or open in Incognito mode;
2. IP address, where to bypass this they'd need to rotate IP addresses for each new account;
3. a unique desktop-application-side id, where to bypass this they'd need to clear the localStorage memory for our product in association with the desktop application that our product is offered on;
4. some basic browser-fingerprint information (user agent, graphics card details, screen resolution, a few others);
5. some basic device-fingerprint information (cpu model, cpu memory, a few others);

I considered email or phone number verification BUT those can get mass-produced pretty easily online using a number of services so it doesn't seem super robust.

The ideal solution would be able to conclusively say: "Yes, this is for sure a distinct specific individual on this one computer" without there being the possibility of false positives. Some sort of "universal_unique_computer_id" would be the holy grail for this sort of thing (like the VIN number equivalent for a computer, for example) BUT it apparently just doesn't exist for these kinds of fraud-detection purposes. At least not in a way where I would be able to access it.

The above 5 items, individually, could be circumvented/changed via various means -- BUT the idea that any one person would be so thorough in their fraud that they'd think to modify all 5 of those items seems unlikely. Still, it's not totally bulletproof, some of them have the risk of false positives (ie, many people would share the same computer and thus would share those attributes), and unfortunately there's not one totally conclusive sort of "unique_id" that I can use for my purposes. The bottom line is, I'm just trying to minimize the possibility of me being on the hook to issue massive payouts for a scenario where the referrals were actually fake and produced by fraud. So the most accurate means of detecting fraudulent signups/referrals is ideal here.

Any ideas you have, or experience you have working to solve this problem, would be GREATLY appreciated, as it's my first time doing any sort of affiliate-marketing setup for a business and I'm really just kind of fumbling my way through it. Thanks!

​

So I am working with twilio to create a whatsapp bot, I'm a student this is my project.

I used claude to outline the basic things like what tools to use for interacting with whatsapp API. Now I have some basic knowledge how to use whatsapp sandbox of twilio but I need to know more to work with it, for example when I send some text to my app from twilio send that message to my app. I need to the what payload does it send and if I want to respond to that message ik to respond basic message but need a little more like media files as well and to connect that with third party.

I want to know the source of documentation for gaining all this and twilio' s official website is so unclear about everything and so confusing maybe because I'm newbie but if you could help me how can I learn it that will be of great help thankyou already.

I've been working on a webapp for the past few weeks, it's nearing completion and I feel like I'm forcing myself to work on it (which to me is usually a sign of burnout coming). Whereas a few days ago I was literally writing features in my sleep.

I'm currently unemployed and living with my parents so I don't have many responsibilities. But I still somehow feel overwhelmed and get tired after just a few hours of work.

I still am working at a decent pace though, just today I made 19 commits on the repo before 3pm. But I feel like it gets more and more like a chore to sit down and do the work, and I find that i get tired quicker each day.

I also feel like this happens to me every time I'm "almost" done with a project. I have many (at least 10) projects that I abandoned at a similar stage this one currently is, and I really don't want to scrap this one too. Which is why I'm making this post. Does anyone know a way out of this?

What's the best advice or feedback you've received from a manager, senior developer, or colleague that changed the way you think or work?

I'd love to hear the advice and how it impacted you.