3 ms·
Ask HN: Platform/Framework for a small, secure Site?
Id like to implement a simple checkout, connecting to a payment gateway. The checkout flow is bespoke, perhaps 2 screens where a user selects some variables related to their purchase, during it there will be calls to a backend API. There will be a redirect to an EPG and redirect back post payment. There is no user-authentication (sign-in etc) required as the initial request will be validated as originating from a trusted source.
Does anyone have any recommendations on a language, framework or platform that:
- Has a good degree of out of the box security to ease OWASP compliance
- Requires minimal maintenance from a security standpoint. Eg doesn't use a whole host of third party packages.
- Is able to be deployed on Heroku, or hosted on a third party service with a CDN that covers asia.
- Isnt a single page app or part of a big e-comm framework
Sorry - a pretty niche request - suggestions / pointers are much appreciated :)
- bausshf 9y agoYou could take a look at my framework which I initially posted to HN recently here: https://news.ycombinator.com/item?id=16743476 https://news.ycombinator.com/item?id=16743476 I'd be more than happy in assisting you how to use it.
- bausshf 9y agoFor Heroku deployment you could take a look at this: https://tour.dlang.org/tour/en/vibed/deploy-on-heroku https://tour.dlang.org/tour/en/vibed/deploy-on-heroku I'd have to add Heroku deployment to the actual documentation though.
- bausshf 9y agoHeroku deployment has been added now http://diamondmvc.org/tutorials/deployment#deploying-with-heroku http://diamondmvc.org/tutorials/deployment#deploying-with-he...
- ian0 9y agoThanks bausshf ill take a look!
- bausshf 9y agoIf you have any questions, need assistance or if there's some functionality you'd like implemented, feel free to let me know. You can either email me, join the discord channel or create a github issue. I'd gladly help getting you going with this :)
- jesses 9y agoI've been using Elixir/Phoenix for a while now and only have good things to say about it. I deploy on gigalixir.com, but Heroku works also. I'm the founder of gigalixir.