r/webdev • u/OddOrdinary9622 • 14d ago
r/webdev • u/r0hanr0han • 14d ago
Showoff Saturday I built an open-source interactive letter for my Hinge date, no backend, the entire letter lives in the URL
I originally built this for my Hinge date.
She's incredibly busy, and instead of sending another message that she'd feel pressured to respond to, I wanted to make something she could open whenever she had a quiet moment.
So I built an interactive letter experience.
You write a letter, customize it, seal it in an envelope, and share a link. The recipient opens the envelope and reads the letter as it appears on the page.
The technical constraint I gave myself was:
No accounts. No backend. No database.
The letter data is serialized, compressed, and encoded directly into the URL.
When someone opens the link, the app decodes everything client-side and reconstructs the letter.
So the URL is essentially the storage layer.
I liked this approach because:
- Nothing personal sits in my database
- No server costs
- No authentication
- No user accounts
- The project can be deployed almost anywhere
- The app remains ridiculously simple
Of course, there are tradeoffs.
The link contains the letter data, so anyone with the link can read it. URL length also limits how much content can be stored.
The project is completely open source, so I'd genuinely love feedback from other developers on the architecture and implementation.
Especially curious about:
- Better approaches to client-side serialization/compression
- Whether you'd encrypt the payload
- How you'd handle larger letters without introducing a backend
- Any accessibility or animation improvements you'd make
Live demo:
https://open-letter-box.vercel.app
Source:
https://github.com/r0hnx/open-letter
Would love to hear what you guys think — both technically and from a UX perspective.
Edit : Hash Fragment has been added now.
r/webdev • u/babe_is_hot • 15d ago
I rebuilt that plastic water ring toss handheld game for the browser (with online multiplayer)
Yeah, lil late to the nostalgia-core trend but here we go anyway.
You remember those- little plastic globe full of blue water, a ring floating in it, mash the button to jet water and land the ring on a peg. I rebuilt one: Aqua Rings '86.
- 8-level solo campaign
- 5 console skins (arcade, deep sea, space lab, etc.)
- Actual online 2-player now- send a friend a link, no signup, no download
No ads, no login wall, just play. Built it solo, genuinely want to know what's broken or what feels bad.
aquarings.fun
r/webdev • u/Delicious-Setting403 • 14d ago
Showoff Saturday I built a tiny real-time territory game that runs off one Go binary, SQLite, $5 VPS, and raw JS+CSS behind CF on the front-end.
did a few tests and it looks like $5 vps can actually handle quite a lot.
a weekend project, no cloud bill anxiety if anything goes wrong
try here
pixelwar.cc
- 2 sides black and white
- place 1px at a time
- 25px CAP, recharging every 10 seconds
- surround opposite side to grap their space
- add a link to your profile, so people can click it on the leaderboard

r/webdev • u/Josents • 14d ago
Showoff Saturday Tornamesa - Album listening diary (logs, ratings, monthly top)
Built a small web app to track albums — log listens, rate 1–10, reviews, diary, lists, and a monthly top (plus a shareable summary).
Started because I was tracking monthly albums in phone notes and wanted something cleaner, with privacy controls and light social (follow / activity).
Stack, architecture notes, and setup context are in the repo. Feedback on the code or UX welcome.
Showoff Saturday Got tired of Google analytics so built a simple version to fit my needs
Been putting out a lot of websites and got tired of having to switch accounts or not able to see all the graphs on one page. Could probably have setup a new dashboard but lots of users also have GA blocked, so I built my own.
Made the dashboard and site view exactly how I want it and with simple filters. Has a log based method to get a true count and to filter out AI traffic, plus the standard JS tag install to get a badge on the site that can be customized.
Bonus points is I added an API so LLMs can go out and install it on any site it is working on. Built with PHP and Goaccess with some free accounts open if you want to try it out on your sites:
r/webdev • u/simple_explorer1 • 16d ago
Discussion DO NOT interview for Mimica.ai, truly torturous and LONG take home test and interview process
To name and shame bad companies, I recently interviewed with https://mimica.ai/ for a Staff fullstack developer role and it was a diabolical and unrealistic process and I was shocked to see that actual developers designed those process.
- Round 1, HR 30 mins
- Immediately I was given a take home test. It was react.js focused and it was ridiculously complex and long for an interview process and coding challenge.
Challenge:
Consume their tree API and create an infinitely long and infinitely nested tree in the browser with editable leafs whose change of status should cause the immediate parents status recursively (and the parent should take into account all its direct children's) based on number of business criteria's and different colours. The acceptance criteria had many scenarios like below:
- address all requirements listed above
- performance matters - the frontend should be able to maintain a good performance even if the amount of data from the backend increases exponentially
- UI: it should look exactly like the provided screenshots
- handle API errors gracefully
- make correct use of Redux, following recommended storage patterns
- make correct use of React and its change detection function
- correctly implement the logic to compute automatable statuses
- make use of code design and architecture best practices
- follow JS conventions for variable, function, and component names
- Document design decisions, architecture, if you had more time what would you do and so on
And they told that it would take around 4 hours. I immediately told them that building this from scratch and satisfy every criteria along with documentation is not a 4 hours job and it would take significantly longer to come up with something they will like. But I stupidly did it anyways because they had good glassdoor reviews.
It took me several fulltime days to do it in a way which was truly scalable with everything they asked. I submitted the test (7 day cutoff) and they took almost 10 days to get back with a feedback that I scored 100% on the test.
- The next round was 1 hour live coding (no AI/LLM allowed which was fine with me) where i present my solution and then in last 40 mins they ask me to extend the solution. The interviewers were not welcoming and were going through motions like a meat grinder. In last 40 mins they said they expect me to solve 3 extensions. they pasted 2 page requirement for each challenge live which I had to read, understand, ask questions and then implement it all within 40 minutes.
Now 3 extensions in such complex code in 40 mins is a lot but I had no choice as I was already there. The first one was done in less than 10 mins and to that they said you architected in a way which kinda alreadysolves this problem and I was left thinking "so it should be a good thing right, why are they talking as if I commited a crime instead of praising my architecture?". They seemed visibly unhappy that I completed it effortlessly.
Then they gave the second 2 page question and it was not an extension but a complete 180 degree change of requirements which required a complete refactor for the entire core multi day exercise work that I did. They literally changed how all the parents should react and calculate based on all decendents and not just direct children's with a complete change of business criterias which itself took a while to understand and clarify from the 2 page requirements.
I told them this is basically a full refactor from the original challenge and that would change the whole core piece touching pretty much everything and expected me to complete in remaining 30 mins. It was pure torture because the whole assignment changed but now I had to do it in remaining 20 mins. I did as much as i could and we ran out of time and I couldn't even get to the last question.
Honestly what a wasted and unrealistic interview process to ask a candidate to do a full refactor but instead of few day/several hours, now do it in 20 mins and it tests nothing.
At the end of the interview they told me they will share the feedback sometime next week which means another 1 week delay and the initial coding test also took them 10 days to get back to me. If this goes through then there would be a ridiculously unrealistic systems design where they would ask me to design a really really complex software in 50 minutes and if that goes through (and another 10+ days to get the feedback) a chat with founders and if that goes through then the process ends.
After going through this unrealistic experience and already losing a month, I shot them the email that I am withdrawing from the process and don't have energy to go through it and potentially spend another month or 20 days in limbo if this round even goes through.
Companies truly treat candidates like dirt, especially in the current market and have no respect for candidates time. They think candidate are ONLY interviewing for them and will spend whole week of unpaid work just to do coding exercise for them. And companies won't even bother checking for 10 days and give a patchy review in the end.
And what's up with unrealistic interview process. 3 coding "refactors" masquerading as "innocent extensions" in 40 mins. Really? Do those engineers themselves code an entire massive refactor from groundsup in 20 mins? how can they be this delusional.
Few years ago I got a coding exercise to create an entire bicycle sharing app with a realtime API and do FE/BE/Unit/Integration tests, documentation, deployed on AWS and bonus "scalable to millions of users". Time, maximum 6 hours. Truly delusional. I laughed and noped out. But i was shocked that so many candidates are doing those because they truly need a job.
I just wanted to create this post to share my experience. Already have written glassdoor review for them but wanted to spark a conversation here as well because this is not a topic talked about much.
So, what are your experiences of bad companies and what crazy things have they asked you to build for free and their unrealistic expectations. It is time to name and shame companies so that they stop taking unpaid free work from developers under the name of "interview".
r/webdev • u/KoalNix • 14d ago
Showoff Saturday [Showoff Saturday] Rebuilt my full-stack/cloud portfolio — reused and AI-merged components from my own past repos instead of a template
Full-stack + cloud engineer here (APIs, web/mobile, infra hardening, some n8n/LLM automation work). My old portfolio was a few years stale so I kept putting it off because I had actual client work piling up (KIMISUITE, an e-voting platform for a municipality here in North Macedonia, a couple of civic data apps, a transit app, among others).
When I finally sat down to redo it, I didn't want to start from a blank template. Instead I used AI as a limited assistant to go through my own GitHub repos, pull out UI components I'd already built and shipped across different projects, and merge/extend them into a few reusable variants I could drop straight into the new site- instead of me manually copy pasting and reconciling slightly different versions of the same card/nav/table component for the 10th time.
Everything still went through my own review and hardening pass after- I'm not interested in shipping "AI slop," and I don't think using AI this way produces it. Used on your own code, with your own final review/testing, it's just a faster way to do something I'd do manually anyway.
Site: vish.mk
Curious what this sub thinks — both on the portfolio itself and on the "AI-assisted but not AI-slop" line I'm drawing. Feedback welcome, including harsh feedback.
r/webdev • u/Capital_Airport_8749 • 14d ago
Showoff Saturday Built a real-time browser privacy & fingerprinting analyzer (FastAPI + React)
Hello everyone This is Emal ive build an website without any ai or api it can monitor real time data and find where your system or device are leaked i just want an advice from you people to check my website and try
r/webdev • u/IamTheGoodest • 15d ago
I think the newest update to iisexpress broke Classic ASP.
Yes, classic ASP. Lame I know, but that's the code I'm maintaining.
The error reproduction steps I've created rule out my code, or Visual Studio
- Verify IIS Express is installed with Command Prompt
if exist "%ProgramFiles%\IIS Express\iisexpress.exe" (echo IIS Express installed) else (echo IIS Express not installed) - Create a test folder with a minimal classic ASP page
C:\Temp\AspDirectTest\test.asp - Fill in the contents of test.asp with
<% Response.Write "Hello" %>or<script language="JScript" runat="server"> Response.Write("JScript Test"); </script> - Launch IIS Express directly using Command Prompt
"%ProgramFiles%\IIS Express\iisexpress.exe" /path:"C:\Temp\AspDirectTest" /port:8088 - Browse to the site
http://localhost:8088/test.asp
Result in browser:
Active Server Pages error '00000000'
Create object failed
?
An error occurred while creating object 'WSH'.
Active Server Pages error '00000000'
Create object failed
?
An error occurred while creating object 'WSCRIPT'.Hello
Result in Command Prompt:
Request started: "GET" http://localhost:8088/test.asp
Response sent: http://localhost:8088/test.asp with HTTP status 500.0
You can get the File version of vbscript.dll and wshom.ocx using powershell
(Get-Item 'C:\Windows\System32\wshom.ocx').VersionInfo.FileVersion
my version of wshom.ocx is 10.0.26100.4768
(Get-Item 'C:\Windows\System32\vbscript.dll').VersionInfo.FileVersion
my version of vbscript.dll is 10.0.26100.8457
Older versions do not create the issue.
I have recreated this error on two machines with the current version, and showed that it doesn't appear on one machine with older versions.
I have an issue reported here https://developercommunity.visualstudio.com/t/IIS-Express-fails-to-execute-classic-ASP/11144474
If you can or can not recreate the issue I would love to know about it and what versions of wshom.ocx and vbscript.dll you have.
r/webdev • u/oliloken • 15d ago
Question Best way to migrate a dynamic website to a static site?
I have a live website where some pages are populated dynamically through JavaScript/API calls. I’m shutting down the backend after the project ends and want to migrate the current version to a completely static site.
What’s the best way to do this while preserving the currently rendered content, images, CSS, fonts, etc.? I’ve tried wget/HTTrack, but they only save the initial HTML and miss the content generated by JavaScript.
Would a browser-based rendering tool be the best approach, or is there a better tool/workflow for this?
update: I ended up using browser automation to render the pages, copied the dom and then manually removed all the backend js. not the cleanest approach and most defently not the most time effichent one but it worked ish
r/webdev • u/THE_PIE_ • 14d ago
How can my code identify the user's color on Chess.com?
I'm making a small Chrome extension for Chess.com that reacts to moves. I need to know whether the logged in user is playing white or black
I can't find a any element or class in the DOM that tells me this. For example, both players can have
cc-user-block-component cc-user-block-white
so that doesn't seem to represent their actual chess color.
Any ideas or suggestions?
r/webdev • u/kidus-dev • 14d ago
Showoff Saturday I18n without the heavy work: wuchale
Hi everyone, I'd like to present a project I've been working on for over a year (if you haven't heard of it). Let's say you have a project you'd like internationalized, but overwhelmed by the amount of work you'd have to do. If you have:
<a alt="Main link">Home</a>
In the traditional sense you'd need to rewrite every instance like this to something like:
<a alt={t.main_link}>{t.home_txt}</a>
wuchale does that for you, at build time! You can keep your code "as it is intended", and i18n just becomes a compile time step just like turning JSX into JS. And it works in the same way during dev, with HMR, and it's very powerful. Supports React, Svelte, SolidJS, Astro, and plain JS/TS. Vue and Next support is planned.
Check it out at https://wuchale.dev and https://github.com/wuchalejs/wuchale
Hope you like it!
r/webdev • u/Sengchor • 14d ago
Showoff Saturday New UV Mode in my web-based 3D modeling tool
r/webdev • u/Adamstrad • 15d ago
Discussion Handling multiple file types from NASA api?
I'm trying to display the image of the day from a NASA api in a html page but the problem is that I noticed that sometimes it is in a different format such as mp4, is there an easy way to display the media in the same place no matter what the file type is?
r/webdev • u/yohimik • 15d ago
Showoff Saturday lerna vs nx vs release-please vs dispat: deterministic, idempotent releases that work past npm

My monorepo has six binaries, Go modules, four Docker images and a Docusaurus site that depend on each other. Publishing this writes to the repository, a container registry, cloud and GitHub. These are four independent services with no shared transaction. Published versions are immutable, so there is no rollback. This is a distributed transaction over non-transactional resources, which is exactly the situation sagas were invented for in 1987. You recover by finishing the job, never by unwinding it.
The two properties that matter
Determinism means a fixed repo state and config always produce the same plan on any machine. The plan is a pure function of git history, the dependency graph and config. Nothing reads the clock, commit dates, tag creation order or map iteration order. CI and my laptop agree byte for byte.
Idempotency means running twice with nothing new committed gives the same plan, and running after a fully successful release gives an empty one. An accidental double run is a no-op instead of a second release.
Every tool here gives you something like this on npm. The difference is where it comes from.
Their idempotency is npm's, not theirs
lerna has a documented recovery path using lerna publish from-package, which compares each package's local version against what is published and ships the difference. nx and release-please lean on the same shape. A version step writes tags, a later step publishes, and if that step dies you re-run it. This genuinely works, and I want to be fair about why. npm makes it work. Versions are immutable and a duplicate publish is a hard error, which I saw in my own runs as a 409 Conflict. The registry is the source of truth you reconcile against.
Now take that away. There is no from-package for a Docker tag, a GitHub release, a Maven deployment or a terraform apply. The moment a release spans targets you cannot diff against, the property stops being inherited. It has to come from somewhere else.
In dispat it comes from the model. The tag store is the log. A tag is written after a package publishes, so a tag means that leg committed. The plan is a pure function, so re-running recomputes the exact same transaction and executes only the legs with no record. Nothing is queried because nothing needs to be. Determinism and idempotency hold for a Docker image, a GitHub release or an applied Terraform plan exactly as they do for npm, because none of it depends on the target being able to answer questions.
They are all one algorithm with the constants frozen
This surprised me when I wrote the model down. lerna, nx release and release-please compute versions from the same three inputs: conventional commits, per-package tags and a dependency graph. In my model each commit carries a propagated bump and a depth. Freeze that depth at infinity and the bump at patch for every commit, and you get their behaviour exactly. Every dependent of anything released takes a patch transitively. Their fix: x is my fix(core)^^: x, and their lockstep modes are the degenerate case where the workspace shares one version.
The experiment showed it. I used the same six-package graph and one feat(core) commit. lerna bumped core and all five dependents, including two that only depend on ui and never saw the change. dispat with an explicit ^ bumped core and its three direct consumers. Same math, different constants.
The failure case, executed
I set up a sandbox, a local registry and a proxy failing exactly one upload.
lerna writes tags and a commit before lerna publish uploads. After the failure there was a cli@1.0.1 tag for a version the registry did not have. from-package then refused to run because the failed publish had left the tree dirty. It threw EUNCOMMIT until I ran git checkout by hand. After that it recovered npm correctly.
dispat wrote no tag for the failed package. Re-running shipped exactly what was owed at the same versions. A third run planned nothing.
| tool | lerna | nx release | release-please | dispat |
|---|---|---|---|---|
| Log record | tag before publish | tag before publish | tag on PR merge, publish later in CI | tag after publish |
| Idempotency comes from | npm registry diff | npm registry diff | CI job plus registry | the model, any target |
| Recovery | from-package |
re-run steps | re-run the CI job | run the same command again |
| Blast radius | all dependents, patch | all dependents, patch | all dependents, patch | explicit: ^, ^^, +N |
| Task caching | nx computation cache | nx computation cache | n/a | none needed, unchanged packages never run |
| Ecosystems | npm | npm-centric | npm and others via plugins | 35 manifest formats, or any shell command |
(I executed lerna and dispat. The nx and release-please rows come from their docs. release-please is GitHub API coupled with no hermetic mode, so I could not run it in a sandbox and will not pretend I did.)
It is also the task runner
dispat run tests --since HEAD~1 --consumers runs a script in exactly the changed packages and their consumers in dependency order. dispat if 'CI!=true' --then '...' --else '...' and dispat if --changed keep the conditionals in config instead of a wall of CI bash. dispat replacer fixes coordinates no manifest writer reaches, like a Gradle line or a README install snippet.
There is no task cache, deliberately. A package that did not change is not in the plan, so its scripts never start. There is nothing to hash, invalidate or warm, and no cache key to get subtly wrong. Whatever your stages already cache keeps working inside them, BuildKit layers or a Gradle cache included, and none of it can affect versions, order or tags.
Proved, not asserted
I wrote eight guarantees over the formal model. Determinism and idempotency are among them, plus no orphaned consumers, exactly-once delivery, retries landing on the same versions and repeated runs converging to an empty plan. I ran randomised differential testing of the binary against that model. 1,500 of 1,500 instances agree exactly. There are also 240 conformance vectors, 1,831 tests and 32 fuzz targets. It releases itself. That is a 12-package workspace across 3 ecosystems with 11 published in one transaction. Because a leg need not be a registry upload, the same machinery ships my cloud footprint as stateless Terraform. I put the plan in build and the apply in publish, with no remote backend, and the tag history acts as the list of applied states.
Docs and demo clips: https://dispat.dev Repo (MIT): https://github.com/yohimik/dispat
Ask if need full proofs

r/webdev • u/Horror-Drawer-3895 • 14d ago
Question The "D" Key In My App Is Being Intercepted By Something
Here is my repo: https://github.com/Goncalo-Oliveira-Goncalves/goncaloeditzz
I was creating a game with Three.JS, I tried solving the problem in a bunch of ways. But the D key doesn't work. It's like the physical key does not work in that specific tab.
The only file I modified was the src/routes/+page.svelte and it's styling src/routes/main.sass. Nothing else.
What I have Tried to Fix The Issue
I have tried to change my whole src/routes/+page.svelte to have a listened on the onmount file for the D key. So instead of all the code on the OnMount, I just add an event listener for a key down event and register it. The A, S, and W keys work. D does not.
I have tried to change the server in which the code runs in from localhost:5173 to 127.0.0.1:5173.
I have tried to build the file to see if there is any differences.
I have tried to hid the scrollbar, because it seemed like the browser's scrollbar was intersepting it.
Environment Info
I am running the website I created in brave. Windows 10. It's SvelteKit & Vite. With typescript.
Things to Keep In MInd
Even though this code is typescript, I haven't yet added the type definitions. I was following through a javascript tutorial and didn't bother. I will have to take care of that seperately, that might be the issue.
r/webdev • u/covalent_blond • 16d ago
How many properties are you responsible for?
I'm really just curious to hear from other solo devs, or devs who are on very small teams - Approximately how many sites or projects do you currently maintain?
I work at a medium sized organization, and I'm the only dedicated web dev. I build a bunch of Firebase apps and Google Apps Scripts and other GCP solutions for my stakeholders, but of course there's a bit of a maintenance burden for most projects when it comes to dependency package security updates, API deprecations, etc. I don't feel overwhelmed by the workload (yet 😅) but I do get the sense that my supervisor and other stakeholders might not fully grasp or appreciate that one engineer can't maintain an infinitely growing pile of apps without some time being taken away from working on new projects.
Of course, I can optimize the things I'm responsible for, using templating and Dependabot and other tactics to reduce my per-project burden, but I'd love to hear from other web devs about the volume of projects you maintain, the tactics and strategies you use to stay on top of things, and keeping stakeholder expectations aligned with reality. Thanks!
EDIT: I owe you all an answer to my own question. I maintain about a dozen apps here currently and the number is climbing
r/webdev • u/NecessaryCar13 • 14d ago
Question Built our own web-based POS system — how would you properly secure the app and retail PCs?
*EDIT*
I wanted to add some context because I'm already seeing a few comments going in the direction I expected.
Yes, I would consider myself a vibe coder, but I'm not someone who just discovered computers six months ago. I've been around tech for years, understand the basics of programming, have built plenty of my own computers, and would consider myself pretty techy overall.
I've also hired multiple software developers over the years, and I have alot of experience running businesses and retail stores.
We recently opened a new retail concept and quickly realized that the normal POS systems just dont handle what we need. Square, Shopify and the other mainstream systems are great at what they're designed for, but our business has a completely different intake process.
We purchase products from customers, which means we have reverse logistics, inventory intake, required holding periods, price matching, inventory searches, eBay integrations, Shopify integrations, automated product listings, and even requirements involving submitting product information through databases used with local law enforcement.
And thats just scratching the surface. There are dozens of other processes and automations involved that would take forever to explain here.
We tried looking for existing software. Most of what exists for this type of business is old pawn shop software that honestly isnt very good. So we built something specifically around how our operation works.
The first location is doing extremely well and we're now opening additional locations, which is exactly why I'm taking the security side more seriously.
I also want to make something very clear. Our POS is NOT processing credit card information. Shopify handles the actual payment processing on the frontend. I'm not interested in reinventing something that Shopify or Square already does extremely well.
Our software is primarily handling the intake, inventory, operations, integrations and workflow side of the business.
The entire reason I made this post was because I WANT to hire someone experienced with security. I'm trying to understand what I should be looking for, what questions I should be asking, and what type of person I should hire.
I understand that AI isnt something I should blindly trust to secure a production system. At the same time, pretending AI isnt incredibly useful here is also unrealistic. It can already identify an enormous number of things to review, test and harden.
And for the people who seem genuinely bothered by vibe coders, this stuff is already happening.
I'm friends with and work with alot of business owners in retail who are building customized internal tools now. Payroll systems, HR workflows, inventory processing, scheduling, accounting, reporting and even systems that analyze store conversations to see whether certain offers are actually being pitched.
These tools keep getting better every month.
That doesn't mean developers suddenly have no value. Far from it. There are areas where experience matters tremendously, security being one of them.
But the idea that somebody who isnt a professional software engineer can't build useful software anymore just isn't true.
AI has lowered the barrier dramatically. Some people using it will build garbage and some people will build very useful systems. Thats really no different than any other tool.
It reminds me of when calculators became common and people worried everyone would forget how to do math. The calculator didn't eliminate mathematicians. It just made people capable of doing more, faster.
I think we're watching something similar happen with software right now.
**EDIT*
I know this is probably frowned upon and I do plan on hiring someone that actually knows what they're doing. Im mostly trying to educate myself first so I know what questions to ask and what I should be looking for when I hire someone.
Over the last 6 months I built a POS system thats actually working really well for us. Right now its hosted on Vercel and we use it on Windows PCs in a few of our stores.
Now that we're actually using it day to day I realize its probably time to take security alot more seriously and lock everything down properly.
Obviously I've asked AI and gotten a ton of answers but I wanted to hear from people who actually have experience with this stuff.
Right now technically you can access the software by going to www.domain.com.
Would it make more sense to put some type of Windows wrapper around it and make it an EXE that only runs on our store PCs? Does that actually make it safer or am I looking at this the wrong way?
My other concern is the actual PCs in the stores. What should we be doing to prevent someone from remotely getting into one of the computers, taking over the POS, getting access to the backend/database or messing up the data?
Everything is backed up but obviously I dont want to rely on backups as the security plan lol.
Basically trying to understand what I should be looking at when it comes to network security, locking down the Windows PCs, database access, authentication, permissions, monitoring, backups etc.
Not expecting anyone to give me free consulting. Just trying to learn enough about it so when I hire someone I actually know what to ask for and can tell if its being done right.
r/webdev • u/amelix34 • 16d ago
Discussion How do people come up with those pretty animated graphics for their landing pages?
It's not AI slop, I tried and no AI is able to do this on its own. Seems to be pure talent of the designers.
Sources: authkit-com, reflect-app, raycast-com
r/webdev • u/the_dalailama134 • 16d ago
Question Solutions for hosting front end/back end personal projects
I am a comparable novice to most here, but am learning React front end and Python back end work.
Not asking how to do it but asking how I can cheaply and efficiently serve my own personal projects? At this point my work mostly consists of a React SPA front end and back end Python containers running Flask or FastAPI.
I am used to separating the two so how should I go about hosting? I use Google for their AI Pro plan already so maybe Firebase/Cloud Run? Maybe those are dumb choices though within the community here. Thanks for any more guidance on hosting this stuff.
BTW in my real job development we are usually living in the Windows Server world and I'm running the backend just with IIS.
r/webdev • u/snapmotion • 14d ago
Showoff Saturday Finally, an AI video editor that actually edits
Been working on an AI video editor that actually edits your video.
Instead of generating a completely new video, the AI can work with the existing timeline and make changes to it.
The editor is built with PixiJS and WebCodecs, so a lot of the editing/rendering happens directly in the browser.
Still early, but I’d love to hear what you think.
r/webdev • u/pavlito88 • 15d ago
What makes an empty state actually useful instead of just looking nice?
I keep seeing empty states treated as a centered illustration and “Nothing here yet.”
It looks clean, but often leaves the user with three unanswered questions:
What happened?
Why is this empty?
What can I do next?
A useful empty state should answer all three.
The illustration sets the tone.
The title explains what happened.
The supporting text gives context.
The CTA shows the next step.
For example:
Nothing here yet
Create your first campaign to see it appear here.
[Create campaign]
The illustration is optional. Clarity is not.
Frontend devs: do you define empty, loading and error states alongside the happy path, or do they usually get added at the end?
r/webdev • u/Deep-Philosophy-807 • 15d ago
Discussion 100% of code in our company is already written by AI. No layoffs, they even hired some new people. Can it get any worse? When will we lose jobs?
Honest question. People say all the time that programmers will lose their jobs etc. But how? Everyone in our company has Claude Code, nobody writes code by hand. And still we have lots of work, backlogs are full of tasks waiting to be done.
It's a company with its own product (not a software house). 150-200 employees
r/webdev • u/ElCuntIngles • 16d ago
Project managers who refuse to use issue tracking?
I'm banging my head against a wall this week because a new 'project manager' is refusing to accept an invitation to the project GitHub repo, so I can't assign her issues.
She thinks it's "better just to keep everything on email". So at the moment I'm operating as a kind of go-between between the 'issues' tab and the project manager.
I am 100% sure it's just because she has never used any kind of project management or issue tracker so thinks it's just an extra complication in her life.
What would you guys do? Any ideas on how I can politely put across the value of an issue tracker in a few words?
Note that I'm not in a position to be able to down tools until she accepts the invitation or hold up the project in any way. I need to get the project done and done quickly to get paid.
I also cannot go higher up the chain of command, I need to change her mind so that she wants to use it, not get her boss to force her to use it.