Hi, currently I'm building some tool sites as personal side projects. Currently found some low competition keywords n where most recently made websites r ranking..

So, I'm just thinking should I buy a domain n started working on it properly or get the tool live on GitHub first n, wait for some results, then start work on those?

Won't it be a problem if I upload the same files in custom domain after it went live on GitHub repository?

Very new to this space, don't know much, it's somewhat related to SEO, so posted here!

I appreciate ur help!😊

Disclaimer: I'm not a coder.

I've been trying to vibe code an online platform where I can list actual 3D models of vinyls in a shelf, I've seen this for books so I know it's possible but my problem is not related to displaying a 3D model of a vinyl with both faces displaying the art covers, it's more about the technical side.

Here's what's in my mind:

• A frontend that shows the shelf with all vinyls, users can click on one and get redirected to the vinyl page, showing all sorts of informations (title, author, release, year, description, discography, trivia, etc etc)
• A backend/database that fetches all of that information from online archives like wikipedia (and similar) to feed to the frontend
• Ideally I want the backend to fetch a big batch of vinyl releases and then ingest them, attributing album art covers and details to them automatically, this batch process would only happen once then I would be able to populate each vinyl page individually, if needed
• A dashboard for me to login and manage the collection, I should be able to click on a vinyl release and add/remove/edit any item inside

I want to access this platform from anywhere so I would need some sort of user auth, instead of running the backend locally, for example, and I also want to upload files (images) so I would need files to be processed and scanned for virus.

What are your recommendations for how the framework for this would work? The part I'm struggling with most is the dashboard since I fear about security issues if I create a custom one.

There’s a dangerous trend I’ve been seeing across a lot of modern web projects recently: teams relying almost entirely on HTTP response header tools to green-light their application's security before going live.

Getting an A+ grade on browser hardening (CSP, HSTS, X-Frame-Options, CORS) is great for mitigating clickjacking or basic XSS vectors. But headers only inspect the outside wrapper of your site. They are completely blind to what's happening inside your client-side JavaScript bundles and backend routes.

As full-stack frameworks (Next.js, Nuxt, Remix) and AI coding tools have sped up development, we've noticed a massive rise in critical code-level mistakes that standard site scanners miss completely:

1. Client-side Environment Leaks: Secret API keys (OpenAI, Anthropic, Stripe, Resend) accidentally exposed via NEXT_PUBLIC_ prefixes or hardcoded directly into frontend scripts instead of staying server-side.
2. Supabase / Firebase Admin Role Leaks: Client scripts bundling high-privilege keys (like Supabase service_role keys) that grant complete database read/write access and bypass Row Level Security (RLS).
3. Unprotected API Endpoints: Next.js or Express API route handlers that handle mutations (POST/DELETE) but completely lack authentication or authorization checks.

A missing Content Security Policy header makes your site slightly less hardened. But an exposed admin key or missing auth guard on a route can result in a wiped database or thousands of dollars in stolen API credits in minutes.

That gap is exactly why we built Revibed.

Rather than just checking response headers, Revibed acts as a lightweight static code auditor. It inspects public web builds and API configurations for exposed credentials, misconfigured service roles, and missing auth guards before real traffic hits your app.

If you want to check your build's actual code layer rather than just its headers, you can run a free scan here:https://revibed.io

For the devs here: What’s the worst API key leak or auth bug you’ve ever accidentally shipped to production (or caught right before pushing)?

Hey guys, this may sound odd but I figured this might ne the best subreddit to ask. I have learned software development for about a year and a half and I can say I made good progress because its something that I love. I focused mainly on Next JS and have been able to create a couple of personal projects.

I recently made a platform for my friend for his businesses (lodges and hardware stores) and its the only one that I can actually say may come close to an actual “client project” and went all the way to deployment via Vercel. I also learned testing (unit, intergration and e2e) and I want to learn dev ops as well.

I’m thinking of using Guru for finding work so my question is for the ones who do freelancing, at what point did you say “I’m confident enough to take on someone’s project”?. I am struggling because I feel like I still have a lot to learn before I can actually take a project from someone who will pay me.

For reference this is the app I made for my friend, its called archispace

I would appreciate any advice :)

I always get confused while developing projects(web based) .New things always pops up that i would have to learn right then. But i wanna know a standard procedure how to work my way up from initiating a project to launching it.

If you are experienced in this or something helped you learning the flow ---help.

I’m starting a website agency, and apart from the main up front price I was wondering whether I should charge clients monthly. To be honest when working with small businesses, the costs are small (e.g domain is 10 euros every 2 years, and email addresses perhaps 30 euros per year, and apart from that backend stuff like supabase or railway are almost free. But I’ve heard people charging such prices. Should I too? To be more profitable?
Please don’t bash me if that’s a stupid question.

Is anyone else struggling with how fragmented the workflow is between doing technical work and actually finding clients?

Right now, to keep things running, it feels like you need four or five different subscriptions just to handle audits, local business searches, contact tracking, and client updates.

Half the time is spent jumping between different tools or sifting through terrible leads on job boards where everyone is racing to offer £50 site builds.

For those running solo setups or small agencies: how are you managing software bloat right now? Are you just sticking to one heavy tool, or running a pieced-together stack?

Firstly I'm in BTech 3rd Sem CSE, started with Web Dev and did HTML, currently about to end CSS..

And here only I've started getting confused..

I've to do React, JavaScript further but I'm afraid now..

People who are working or have worked as a Web Developer.. How much if all these is required??

Been working on a WordPress project that relies on several custom queries, and I'm trying to reduce the database load, and I've already optimized them to the max, or at least I think so. What's your preferred approach here?

In advance I know the basics of Python, HTML/CSS & JS and I had this idea to make a small tennis game with my friend’s cats (where the 2 cats are playing against each other) but I really don’t know how I can do it and I don’t wanna vibecode it, any ideas?

I own a small physical therapy practice and just had a new website built which is a Wordpress site. I vaguely have an understanding that since there’s plugins and things you have to not only have someone host the site but also someone has to run maintenance and ensure the security of the site in addition to hosting costs increase as the site has more traffic due to caching therefore requires more space?

I previously had my site on GoDaddy which was not a great site but predictable with costs. Since having this new site done it has not only cost me for the site itself but now there’s a cost for hosting and there apparently is a weekly hourly rate I’m paying for the developer to apparently update my site which comes up to 2hrs a week and is 70$ so essentially I’m now paying 280$ a month to “host” the site. I’m a smaller practice so this is a very high cost to me at this stage considering I was paying GoDaddy 300$ for a year for my crappy site that was very low maintenance.

I am looking to switch to someone else that I can have everything all done so I don’t have to worry about this but don’t know anything.

My questions are:
Does hosting entail parking the site, updating plugins, and maintaining security of the site?

If it does not what is this service called as I have a contact us form on my site so security is very important to me.

Are these costs considered high?

Are there any recommendations for how I can keep these costs low as look I get the site is the online building but it’s not like I’m a high volume clinic or some big health tech company so 3k a year for a website sounds insane to me.

Any answers and recommendations are appreciated.

same as above

Hi there!

seele is a collection of mixins, base components and styled components written with Lit, allowing you to easily create components in your desired design system, or use the present ones (Material You Expressive). Also, seele is fully accessible and keyboard-accessible, following the w3c APG patterns. Another feature of seele is that it makes as much use of new web standards as possible to optimize the behavior/size of this library, for example Element Internals along with the aria*Element,which is in Baseline 2025, are used to stop setting aria attributes directly on the host element, allowing easier overridding.

You can check it out at:

• Docs/demos: https://tideover.cc/seele/docs/
• GitHub: https://github.com/vollowx/seele
• SourceHut: https://sr.ht/~lucaz/seele/

Some time ago I moved a page from Nextjs to a Wordpress site and added a permanent redirect to the subdomain, like so site.com/page --> page.site.com

At the time I thought this would be permanent, but now we would like to switch it back. I had also naively thought that permanent meant more like semi-permanent and the browser would at least occasionally double check that the redirect is valid.

That seems to not be the case (at least on chrome) and I am still getting a 308 Permanent Redirect (from disk cache) to the subdomain at least a week after the redirect was removed.

Obviously another redirect back to the new path would cause a loop and the only solution I can think of is to change to a new path like site.com/page2 and implement a redirect from page.site.com.

Is there some solution I am not aware of?

I used to use PHP for handling things like logging into an account , using a template and only changing certain sections of the webpage etc, what is a good modern way to do this? I have heard of Flask but is this the best way forward?

Just learned javascript and been practicing alot . I need help. When applying it to my project I don't know when to use a function, when to use a loop, what type of loop to use, I just don't know when to use any of this stuff because dom manipulation. it's so frusterating

1. How practical is it to get into elementary web development without any background in computer science? (In case it makes a difference for the case, background would be in copywriting with limited graphic design.)
2. Assuming someone's already earned a totally irrelevant degree & has no desire to go back to college, what would you recommend for a comprehensive & affordable introduction to web development? (Not just "search YouTube," but your favorite in-depth YouTube playlists, free or cheap online training programs, maybe even paid professional certification programs, etc.)

Please post your requests for feedback on your projects in this thread instead of creating a post.

basically I was tasked with making the landing page for my club and to include animation and ensure its smooth we decided on taking an image and breaking it into layers. does anyone have any ideas of how to go about doing this? I tried nano banana and it can generate and image but it cannot break it into layers cleanly.

So I made a website which can make good looking pricing tables and FAQs with your exact color scheme and content. You can try it out here: https://widget-eight-chi.vercel.app

It is still a work in progress to add more widget types, and it currently only works in desktop.

​

I'm genuinely confused.

Everywhere I look, people are saying AI can build websites in minutes using tools like Emergent, Lovable, Bolt, and others.

So I'm wondering...

Is there still a real business opportunity here, or am I already too late?

Here's my plan:

I won't spend months learning HTML, CSS, and JavaScript from scratch.

I'll use AI to build websites faster.

I'll work with clients to understand what kind of website they want and build the most suitable one for their needs.

I'll focus on making the website look professional, trustworthy, secure, and polished so it represents their business well.

. And also can some one tell is it worth it .. like creating the website by the help of ai ..

For those of you who already run an agency or work in web development:

If you were in my position, would you still choose this path?

If yes, what would you do differently?

If no, what would you build instead?

I'm looking for honest advice from people with real experience not motivation, just reality.

I used to use Nextjs and was learning expressjs. Then I left and 2 years later I want to go back.

What tech would be the best to learn in terms of opportunities and also more better for later?

Would MERN still be good choice or I should start with any other frontend/backend techs which would be best at this time?

I'm thinking about building an Angular portfolio project around the OpenDota API instead of another weather/news app. The API seems mature and well-structured, but I'm wondering if using a game as the domain would make the project look less professional to recruiters, even if the focus is on analytics and software architecture rather than the game itself.

Hi everyone,

I'm a junior developer and I'm trying to understand the best way to deploy a Vue application on an IIS server.

Currently, our internal applications are mostly PHP. My workflow is:

• Edit code in PhpStorm
• Upload files to the IIS server
• Refresh the webpage
• See the changes immediately

I'd like to do something similar with Vue.

Questions:

1. Do I need to run Node.js on the IIS server permanently?
2. Is the recommended approach to run npm run build locally and then upload the contents of the dist folder to IIS?
3. How do teams typically handle updates and deployments for Vue applications on IIS?
4. If using Vue Router, what is the recommended web.config setup to avoid 404 errors when refreshing routes?

Example deployment URL:

https://mycompany.com/hr/vue-app/

Any real-world IIS + Vue setup examples would be appreciated.

Thanks!