5 posts tagged security, newest first. Notes from real builds, filed by topic.
9 min read
On 4 October my GitHub sync copied two Base44 backend functions into my app, I published, and both still answered 404 "not found or not deployed". How to test a function with curl, redeploy it with the CLI or one Apps API call, read secrets and logs properly, and catch bugs first with Deno.
9 min read
My Base44 Partner leads land in my own CRM through a backend function with a public URL, so it checks every delivery first. Signing is required (no secret, 503), the HMAC is checked on raw bytes in constant time, retries are skipped by event id, and a failed save returns 500 so Base44 tries again.
9 min read
A UK GDPR cookie banner on Base44 needs equal Accept and Reject buttons, and code that stops anything optional running first. On my site, Base44's own analytics logged page views and stored a visitor ID before anyone clicked. Here's how I gated it, with the code and the checks.
7 min read
Shipping 20+ apps for real clients taught me that code is rarely the hard part. The hard part is finding the real problem behind the first ask, then checking the boring details before users do. Here's what freelancing at 15 has taught me, with the reviews to back it up.
8 min read
Every entity on my site has an explicit rule for create, read, update and delete. Here are the four RLS patterns behind all ten, two more for apps with users (clearly marked untested), when to reach for the service role, and the checklist I run with Base44's security scan before launch.
Newsletter
New posts, what I built and the Base44 and AI news worth knowing. One email, every Friday at 8am.
Ask me. If it's a good question, it might turn into a post.