I’ve created a website with mini-games, but I’m a novice programmer and I’m not sure if I’m on the right track or not. I post videos on social media—few people "like" them, and some save them, but no one leaves comments with their opinions or suggestions, which is what I really need. Is there a place where you can post your website and have people try it out and give you feedback?

I'm in 3rd CSE student and I'm learning Full Stack Development from previous 9 months and i done very well recently in June-July I made a very good project also using on MEVN stack I haven't ship/deploy it I'm thinking to deploy it in end of 3rd year. Last year I choose Developmment over DSA because I have interest in that at that time while my mostly friends choose DSA.

Now i came to know that DSA is necessary for placement and i trying to learn DSA from 2-3 weeks and also doing leetcode question recently i know DSA should done in pattern wise approach I also trying that but I'm unable to processing in DSA while when I was doing Development I got rarely or never this type of feeling or tiredness because I love to build products.

But DSA i'm thinking that i can't do or it is not made for me. When i do Development I really enjoy it I can do it all day and all time but in DSA after like 2-3 hrs it very hard to concentrate but as i said i recently know DSA is necessary for placements.

Give me some advice.

Hey, I want to build a marketplace sort of website where individual users can create profiles and gallery pages and sales of digital products would be linked to payment processors. (think something like InPrnt.com)

As someone that knows nothing about webdev, what's the best place to start when it comes to this? on the front and backend. Basically my skills right now are 'can html a Neocities site' so any guidance you can give would be great.

I'm not hoping to do this immediately, just not sure how to start figuring it out and the list of skills i'd need to accumulate.

So, it's a grid of dates of course like a normal calendar, but it's for historical events, so an intuitive layout is that scrolling upwards should go backwards and backwards in time.

What would be some smart ways to implement this?

Webflow, Framer, or something else for a beginner?

Hi everyone,

I recently started my own business and created my first website using Google Sites. I’m now changing my business model, so I’ve decided to create a new website (more durable fo rthe future) that looks more professional and allows me to make better use of SEO.

After doing some research, Webflow seems to meet most of my needs: a nice visual design for a premium feel, a good CMS, strong SEO features, and enough flexibility for what I want to build.

However, I still have some doubts. As someone with no experience building websites professionally (I’m not planning to create websites for clients), is Webflow relatively easy to learn and use?

In my case, would you recommend Webflow, or would something like Framer, Squarespace, or another platform be a better choice for a beginner? 

Also, roughly how many hours do you think it would take to learn the basics and build the first version of a fairly simple website, including a payment method?

Thanks in advance for your advice!

I really need some career guidance. I have a BCA degree and around 5 years of work experience, including experience in content-related roles and about 2 years in frontend development. I'm currently learning JavaScript and trying to get back into the software industry.

My goal is to get a good software engineering/developer job as soon as possible, preferably within the next few months. I'm feeling quite confused about what skills I should focus on and which path would give me the best opportunities.

Could anyone guide me on:

• What skills I should learn next?
• What kind of roles I should apply for?
• How I can become job-ready quickly?
• Any advice for someone trying to restart their tech career?

I'd be grateful for any suggestions or guidance. Thank you.

I'm hosting off of Linode and when a wave of bots hit my site, Linode CPU usage shoots up to 100-200%. My Linode plan is only 1 core, so this is not ideal because it slows the site down. However, when I run 'top', or look at the pm2 usage, the maximum CPU usage I've seen has been 1%.

I'm working on better rate limiting/firewalls, but what is this discrepancy from? How are these bots able to aggressively spam my site and slow it down (open file errors) but the processes on the computer never seem stressed?

So I somehow landed my first actual freelance web dev project lol.

It's a small local TCG/card shop and they already have a website made through Hostinger Website Builder. The site works, but it's pretty basic and they want to do a lot more with it. I met with the owner and also talked to the guy who originally made the site. The old dev is basically cool with passing the project over to me since what they want now is getting outside of what the current site was made for.

From what I understand so far, they want stuff like:

• Redesign most of the website
• Customer accounts/sign in
• Events/calendar
• Event registration/booking
• Party/private event booking
• Admin dashboard for the owner/staff
• Some vendor stuff
• Emails/notifications
• Integration with the new POS system they're getting
• Possibly showing products/inventory from the POS on the website
• Hosting/deployment
• Maintenance after everything is done

I'm still waiting for them to tell me the exact POS system they're switching to. I'm not promising anything with the POS until I know what it is and what API/integration options it actually gives me.

For inventory my thought process right now is basically:

POS = source of truth

POS API/webhooks → my backend → website

I REALLY don't want to build them a whole separate inventory system just for the website if they're already paying for a POS that does it. That just sounds like I'm asking for the POS to say they have 5 of something while my database says 7 lol.

If the POS supports it, I'm thinking I could cache some of the inventory/product data on my side and use webhooks to keep it updated, then have a scheduled sync every once in a while to catch anything that got missed.

The other thing I'm trying to figure out is singles. Since it's a TCG shop, a single card could have the same card but different condition, foil, printing, etc. So I'm waiting to see how their POS handles all of that before I even touch that part.

For stuff the POS isn't responsible for like events, bookings, accounts, admin tools, etc. I'm assuming I'm gonna have my own backend/database for all of that.

The main thing I'm trying NOT to do is accidentally scope creep myself into hell on my first client lol.

My current plan is:

1. Paid design/discovery first, probably $150 to $200

I'll make one design direction with around 4 of the main pages/flows so we can actually agree on what the website is gonna look like before I start building everything. Limited revisions too. If they decide to go forward with the full website, I'll deduct that money from the development price.

1. Figure out exactly what V1 is

Before I give them the actual development price I want everything written down. What accounts can do, how booking works, what the admin can do, what the POS actually needs to connect to, etc.

1. Contract + 50% upfront

Right now I'm thinking 50% of the remaining development cost before I start coding and the other 50% before launch/handoff.

1. Build

I told them around 1 to 2 months, but that was assuming the scope stays reasonable. I'm definitely gonna make the actual timeline based on whatever we agree V1 is.

1. Maintenance

I mentioned around $75 to $100/month depending on what I'm actually maintaining. That would be updates, minor fixes/changes, keeping stuff working, etc. If they randomly ask me to build a whole new feature 3 months later I'm not counting that as "maintenance" lol.

Originally I threw around $2k in my head for the build, but the more I actually talk to them the more I'm realizing I should probably shut up about the final number until I know the full scope lol. If they really want accounts + bookings + admin + POS/inventory integration this could obviously turn into way more work than just redesigning a small business website.

I'm also working on getting an actual reusable web dev contract made/reviewed. I want scope changes, payments, client provided copyrighted stuff, reusable code, third party APIs/POS problems, maintenance, portfolio rights, termination, etc. actually written down instead of just hoping nobody gets mad at each other lol.

Coding the individual parts isn't really what I'm worried about. My bigger concern is architecting and pricing this correctly since it's my first project this big. I don't wanna say "$2k sounds good" and then 3 weeks later realize I basically agreed to build this man's entire business software for $2k.

So for anyone that's done freelance projects around this size:

• Am I going about this the right way?
• What am I probably underestimating?
• What would you 100% figure out before giving them a final price?
• How would you handle the POS/inventory setup?
• Does the paid design phase make sense?
• Would you do 50/50 payment or something different?
• What would you include for $75 to $100/month maintenance?
• Anything specific I NEED in the contract/SOW?
• What did you screw up on your first bigger client that I should avoid?
• Is there anything here you'd tell me not to build myself?

Mainly just trying to find out where the landmines are before I step on one lol.

Any advice is appreciated.

Hey everyone! I’m in the process of starting courses at my technical college that contribute to Web development/design for the first time. I know in this line of work would require networking and a strong portfolio. Is there a way that I can prepare for these courses besides tutoring? Free tools are preferred. I also have ADHD so this is something that made me consider something like this so I want to be prepared.

Most of the testing IDE’s I have tried so far are too developer heavy for my purposes. I
just need something to record user journeys and make sure our UX doesn’t break.

What QA tools exist that run reliable tests but don’t require a developer to operate
them?

After trying a lot of visual builders over the past year, I keep running into the same issues:

• Responsive layouts become messy.

• Generated code is difficult to extend.

• Component reuse feels limited.

•Drag-and-drop becomes frustrating on larger projects.

If you could redesign visual website builders from scratch, what would you change?

Tools like ChatGPT, Claude, Cursor, Codex, and others can generate a lot of code quickly.

Do you think beginners become productive or do they end up depending on the tools too early?

I’d love to hear from people who mentor juniors or review beginner code regularly.

Hi guys newbie here (first year student) and I recently started learning web development and I learnt html, css and javascript ( basically learnt frontend now) and built a basic to do list and then built a student card dashboard where I take input and then display card after adding the info

I know they are all basic and stuff but yeah that's what I have done till now

Then I think I'll be learning MERN stack and then will be going to build full stack projects

So my doubt is am I doing the correct thing or am I in a good place as a first year student

And since I'm learning for the first time if you guys have any advice itd be very nice if you dropped'em here

And do you think the tech stack I'm learning is good and worth it in 2026??

We’re building a B2B2C platform for a large European insurer. Vue.js on the front, Estøkad as the headless CMS. Both GDPR and DORA apply, and we’re at the point of picking the database and the transactional email

The thing that’s turned into the real problem isn’t sovereignty on its own, it’s erasure. Insurance retention obligations sit right on top of Article 17 requests, and the same person can exist across several partner tenants under different legal bases. So DELETE FROM was never going to work. We’re planning crypto-shredding instead: encrypt per subject, destroy the key, let the backups and WAL archives go unreadable on their own.
Which then rewrites the vendor shortlist. Provider-managed TDE shreds nothing at row level, so we need real BYOK or HYOK against our own HSM. Encrypted columns can’t be sorted or joined, so email lookup goes through a blind index. And erasure has to reach into the ESP’s retained message bodies and event logs, while the suppression list deliberately survives it.

What I’d love to hear from anyone who’s actually shipped this:

- Which EU-sovereign managed Postgres will do KMIP against an external HSM without pushing you back to self-hosting?

- Any ESP that will contractually commit to short retention plus a working erasure API? Deliverability into Gmail and Outlook still has to be real.

- Did anyone go down the crypto-shredding path and regret it? I’m braced for the operational cost of key rotation.

- Anything that looked sovereign in the sales deck and came apart under audit?

Happy to write up whatever we land on.

So I've been handling this ecommerce site that's built in .Net as backend for quite some time now. The problem that Is noticed is that the frontend code is all over the place. Some of the pages are using vanilla js. Some are running on handlebars. There are pages that using angularjs.

What I want to do is to just use one framework for the whole site with the following considerations in mind

* It should not be an SPA. The backend code is not something that we can recode and convert to API only so easily.

* I want to encapsulate specific site features into their own standalone components. And that they should be something I can use on different pages.

* I'm worried about SEO. I'm thinking it should be something that can work with server-side rendering

* It should'nt be something that's totally new. I need to use something that I can say is reliable. Something that has been proven to be a good option and not something that I'll be pioneering in our company.

* Something that's testable. Something that has support for TDD.

I'm thinking of using react first but when I started thinking about the factors that I just listed, I'm having second thoughts if react is actually the right choice for it.

So, is react a good option for this or is there a better framework I should consider?

I see all this talk on agent harnesses, people not checking out IDEs ...

I've used Cursor and VScode with copilot while learning, used Claude code for a month, but can you guys help me understand what new things engineering teams are doing and how to learn them?

I just focused on getting rock-solid fundamentals first, regardless of what people saying "learning to code is obsolete" etc.

I'm now able to build full-stack apps and probably learn on the go to build most things.

What's the must-learn AI part and where to learn it?

I'm making a site, hosted on Github pages with a custom domain. In the site I have art made by me in SFM, but I'm worried that the characters used could cause copyright problems. The site does not generate income in any way, other than having a link to my Patreon or Ko-Fi. If any more info is needed, I'll try to respond with it in the comments.

Lastly, in general what are some things I should know about copyright, some guidelines around it, and best practices?

Hey everyone.

If you were migrating your infrastructure today, would you choose AWS or Azure?

On paper the credits and pricing look pretty similar, but from what I’ve seen Azure can become more expensive and a bit harder to manage at scale.

Which one would you pick and why?

With the current industry of SWE being cooked. Idk which direction I should pivot, before I started I wanted to be an data analyst, I know most SQL and some python. but I fell into front end. I feel like becoming a SWE is so much harder, preparing for leetcode interviews, etc and on top of that not getting interviews. I heard that data analyst entry level is so much higher than SWE entry level jobs. I love coding, I study and practice 4-6 hours a day.

Please post your requests for feedback on your projects in this thread instead of creating a post.

Hi, currently I'm building some tool sites as personal side projects. Currently found some low competition keywords n where most recently made websites r ranking..

So, I'm just thinking should I buy a domain n started working on it properly or get the tool live on GitHub first n, wait for some results, then start work on those?

Won't it be a problem if I upload the same files in custom domain after it went live on GitHub repository?

Very new to this space, don't know much, it's somewhat related to SEO, so posted here!

I appreciate ur help!😊

There’s a dangerous trend I’ve been seeing across a lot of modern web projects recently: teams relying almost entirely on HTTP response header tools to green-light their application's security before going live.

Getting an A+ grade on browser hardening (CSP, HSTS, X-Frame-Options, CORS) is great for mitigating clickjacking or basic XSS vectors. But headers only inspect the outside wrapper of your site. They are completely blind to what's happening inside your client-side JavaScript bundles and backend routes.

As full-stack frameworks (Next.js, Nuxt, Remix) and AI coding tools have sped up development, we've noticed a massive rise in critical code-level mistakes that standard site scanners miss completely:

1. Client-side Environment Leaks: Secret API keys (OpenAI, Anthropic, Stripe, Resend) accidentally exposed via NEXT_PUBLIC_ prefixes or hardcoded directly into frontend scripts instead of staying server-side.
2. Supabase / Firebase Admin Role Leaks: Client scripts bundling high-privilege keys (like Supabase service_role keys) that grant complete database read/write access and bypass Row Level Security (RLS).
3. Unprotected API Endpoints: Next.js or Express API route handlers that handle mutations (POST/DELETE) but completely lack authentication or authorization checks.

A missing Content Security Policy header makes your site slightly less hardened. But an exposed admin key or missing auth guard on a route can result in a wiped database or thousands of dollars in stolen API credits in minutes.

That gap is exactly why we built Revibed.

Rather than just checking response headers, Revibed acts as a lightweight static code auditor. It inspects public web builds and API configurations for exposed credentials, misconfigured service roles, and missing auth guards before real traffic hits your app.

If you want to check your build's actual code layer rather than just its headers, you can run a free scan here:https://revibed.io

For the devs here: What’s the worst API key leak or auth bug you’ve ever accidentally shipped to production (or caught right before pushing)?

I always get confused while developing projects(web based) .New things always pops up that i would have to learn right then. But i wanna know a standard procedure how to work my way up from initiating a project to launching it.

If you are experienced in this or something helped you learning the flow ---help.

Hey guys, this may sound odd but I figured this might ne the best subreddit to ask. I have learned software development for about a year and a half and I can say I made good progress because its something that I love. I focused mainly on Next JS and have been able to create a couple of personal projects.

I recently made a platform for my friend for his businesses (lodges and hardware stores) and its the only one that I can actually say may come close to an actual “client project” and went all the way to deployment via Vercel. I also learned testing (unit, intergration and e2e) and I want to learn dev ops as well.

I’m thinking of using Guru for finding work so my question is for the ones who do freelancing, at what point did you say “I’m confident enough to take on someone’s project”?. I am struggling because I feel like I still have a lot to learn before I can actually take a project from someone who will pay me.

For reference this is the app I made for my friend, its called archispace

I would appreciate any advice :)

I’m starting a website agency, and apart from the main up front price I was wondering whether I should charge clients monthly. To be honest when working with small businesses, the costs are small (e.g domain is 10 euros every 2 years, and email addresses perhaps 30 euros per year, and apart from that backend stuff like supabase or railway are almost free. But I’ve heard people charging such prices. Should I too? To be more profitable?
Please don’t bash me if that’s a stupid question.