badsectorlabs

3 ms·

1.
Handling Fatal Errors in Production on a Saturday Night(blog.badsectorlabs.com)
2 points by badsectorlabs 8y ago|0 comments
2.
by badsectorlabs 9y ago
It is checked server-side. I understand why people are concerned that the price is passed in a way that they can see vs grabbed via javascript or another method like most other sites, but that doesn't change the responsibility to check
3.
by badsectorlabs 9y ago
Exactly this. You could host cheaper with a really low tier VPS, but as soon as you get posted to hacker news, game over. If traffic increases to such a degree that this architecture is no longer the best choice, we can move off without con
4.
by badsectorlabs 9y ago
The price is checked server side. You have to pass the price somehow to the client in order to display it. This is no different than any other ecommerce site, except that you can see it in a GET param. I can "change the price" of
5.
by badsectorlabs 9y ago
gitlab.com is free for private repos!
6.
by badsectorlabs 9y ago
A valid concern. However even after reddit and hacker news has had their way with the site, my phone has been impressively quiet. These push notifications are only for cases where the lambda functions thrown an error that isn't handled
7.
by badsectorlabs 9y ago
This is awesome and will save people tons of time setting up something similar!
8.
by badsectorlabs 9y ago
I agree, the param passing is not ideal. Session storage/local storage is another option.
9.
by badsectorlabs 9y ago
Yes, or you could edit the html source with dev tools. Trying to purchase a ticket with a modified price will not work. Never trust user input!