Reading view

what do you actually do when a bug only reproduces in production

had one last week that I couldn't reproduce locally or on staging. adding logging required a deploy, which felt sketchy when I didn't even know what I was looking for yet. ended up bumping verbosity on one prod instance and watching real traffic for about 40 minutes until it triggered

do you have a shadow/mirror env that catches these, or is it always some version of flying blind with extra logs

submitted by /u/quietcodelife to r/webdev
[link] [comments]
  •  

what's your approach when you're the only one who fully understands a piece of your codebase

asking because I've got a chunk of auth logic at work that I basically wrote and maintained solo for two years. not by design, just kind of evolved that way. started getting nervous about vacation coverage and eventually wrote a doc for it but the doc got stale within like a month.

curious how other people handle the bus factor problem when it just kind of happens organically rather than being a deliberate choice

submitted by /u/quietcodelife to r/webdev
[link] [comments]
  •  

Help! Trademark Infringement on my [GovernmentName] domain

Help! Trademark Infringement on my [GovernmentName] domain

Context :

I am a computer science student with a personal website at ( https://www.christofle.dev/ )

My legal government name is 'Christofle Tjhai' at birth. I registered christofle.dev a few months back to serve as my personal website, fast forward one week after I actually developed my website, I got this on my gmail.

Looking for advice. Should I stand my ground or hand it over?

IIRC trademarks are filed under categorizations, this french company sells luxury silverware, while my website is completely unrelated to it, serving as my personal website as a software developer.

EDIT #1 :

I am a student! I have no money to consult a lawyer

EDIT #2 :

After thinking about it more, I’ve decided this probably isn’t worth the effort, energy, and money that would be spent if they pursued it further.

I still think my reason for registering it is pretty straightforward: Christofle is literally my given name, I use the domain for my personal dev portfolio, and I never registered it to impersonate the company or benefit from their brand.

However, even though I have a strong defense, if this ever turned into an actual lawsuit I would still end up burning lots of money defending it.

It's the harsh reality of modern day law. It was never fair for average working people, it is what it is yeh.

submitted by /u/yippypuppet to r/webdev
[link] [comments]
  •  

Can you offer payroll under your own brand without building it yourself?

We're looking at adding payroll to our platform but I don't want customers getting pushed into another company's product every time they need to run payroll

Ideally we'd own the experience and keep everything under our brand while someone else handles the actual payroll infrastructure, tax filings and compliance behind it

I've been looking into white label payroll for this but I'm curious how much control platforms get over the customer experience

submitted by /u/Ok-Leg1945 to r/webdev
[link] [comments]
  •  

documenting old solo code and found a try/except that just silently swallows one specific exception. no comment. no ticket. no context. I wrote this. why did I write this

been the only dev on a backend service for about two years. finally sat down to write proper docs for it today.

found a try/except block in the job queue handler. catches one very specific exception type. does absolutely nothing with it -- no log, no reraise, no fallback. just silences it. there's no comment explaining why. no linked ticket. no slack thread I can dig up. git blame points to a commit message that says 'fix job queue issue' with no further detail.

I genuinely cannot reconstruct what I was protecting against.

if you work solo, please leave your future self a comment. even one line. it costs nothing. I am begging you.

submitted by /u/quietcodelife to r/webdev
[link] [comments]
  •  

Pagespeed phantom domain

Pagespeed phantom domain

Not sure what to make of this, been making some tweaks on my WordPress site and checking pagespeed as well as other tools for progress and one session suddenly csa.crazygames.com/event pops up?

A burst of panic had me hunting for mailware or something in a plugin that's gone rogue... But nothing.

Subsequent tests it's gone, installed wordfence for a scan, nothing. I tried another page on pagespeed and Microsoft Clarity appeared, subsequently it's disappeared too, haven't had clarity in over a year and that was run in edge cloudflare tag management.

I'm hoping this is some unexplained ghost glitch from Google on that test session?? Anyone able to put my mind at ease or advise what I'm looking at? Never seen anything like it before.

Apologies for the average screenshot.

Update: after 12 hours of fluffing about I am no further ahead, completely unable to repeat the domain instance, unable to find any evidence of code or script in anything thus far. Still searching (db now) but have a feeling I maybe hunting a phantom occurrence. Pagespeed has been timing out today regularly, all instances with internal timeout errors at Google end. Where as any other tool, dev lighthouse included, runs clean with nothing weird. Everything site wise remains flawless and fast('ish by my standards). No evidence of admin manipulation, user or plugin wobbles... It's going to be a troubled sleep night while I second guess myself. Edit: the only other common thread to the instances observed is they were all using my phone doing pagespeed test, desktop is zilch... I doubt very much this has anything to do with anything at all but I'm just going to start yelling at the passing clouds now...

submitted by /u/Beneficial-Rise-740 to r/webdev
[link] [comments]
  •  

Fellow devs under AI mandates, how do you deal with the shame/social stigma?

Preface this by saying I have moral scrupulosity/ social judgment-related OCD, so there’s that lol

I see people on here still writing their code by hand; at my company we do not have that option unless we outright defy orders from our boss, which I assume would get you fired. I get a lot less satisfaction out of my work now, the code generation part is extremely mind numbing, I’m really sad about not getting to write code anymore. The planning/architecture phase can be kind of fun though.

Yes I am looking for a new job but the issue is (maybe I’m just a shitty developer but) I am genuinely like 10x faster with AI so if I do not use it, I would be consciously choosing to do a worse job, which also feels wrong and silly. I also hate admitting this but it has given me a lot of genuinely helpful suggestions and taught me new things. obviously sometimes it also does dumb things, but I do dumb things sometimes too. As obnoxious and eye rolling as it can be talking to Claude, “he” is genuinely that good when it comes to the types of things we are building.

In my personal life I do not use AI because I have a 100% HEAVILY anti AI social group, and I try to make ethical choices like I avoid beef, boycott Amazon/Spotify/Starbucks, etc. I feel like an impostor for not confessing to them that my entire job is to use AI all day now. Like for example last night a girl I know posted on her close friends about how she wants to murder people who use AI at work (hopefully being hyperbolic) and I have to hang out with this girl in a couple weeks…

my coworker has also refused to use it but for some reason my boss hasn’t talked to him about it yet. He’s just waiting to get fired. My therapist is making me do stuff like put an AI app on my home screen where someone could see it as homework. Maybe I should be posting this on the OCD sub but I really want to hear from other people going through this same dilemma.

submitted by /u/ASS_MASTER_GENERAL to r/webdev
[link] [comments]
  •  

How do sites detect whether someone is running adblocker?

I've been interested in this functionality (when a site detects your adblocker and kindly asks u to whitelist).

The only idea that comes to mind is setting a div in the layout with "ad" class or something similar, and then if a user has adblocker the adblocker would be removing this div from the dom. I don't think this would consistently work for every (or at least most of the popular) adblockers out there.

submitted by /u/ImBoB99 to r/webdev
[link] [comments]
  •  

Whenever I work on a project with heavily nested folders, I lose track of where the folders end. So I made this VS Code extension a while ago, that adds colors to the nested folder tree view and it actually helped me a lot. I thought it might help others too, so here it is.

Whenever I work on a project with heavily nested folders, I lose track of where the folders end. So I made this VS Code extension a while ago, that adds colors to the nested folder tree view and it actually helped me a lot. I thought it might help others too, so here it is.

Note: This extension injects CSS styles to the VS code workbench HTML file. Because of which you need to run the application as administrator only for toggling the extension or if the VS code or the extension is updated.

Free & Open Source. You can find it here:

Hope this is helpful. Feel free to drop any feedback, suggestions or ideas.

submitted by /u/RajSrikar to r/webdev
[link] [comments]
  •  

Web Based Scheduling App Sh*t the bed randomly after 11 months of no bugs.

Edit: Electronic-Post12351 got was able to understand exactly what I was describing and offer a conclusive reason for the sudden breakage. It lines up with the exact behavior we've been experiencing. I really appreciate it!

My colleague and I are at a loss with what has suddenly broken our web based scheduling app that was written with PHP on the backend and Javascript on the front end.

The front end basically acts as a dynamic HTML based table that allows users to drag, drop, delete, and complete scheduling entries.

It is manually saved why taking a snapshot of the table in a jscn array and writing it to a SQL table on our database.

I spent a year, before the AI boom, writing this application myself and working out all of the bugs and inconsistencies.

I have debugging code out the ass, and know the application like the back of my hand

My last update was October of 2025 and it has ran fine with zero reported issues.

​Now suddenly this week in September 2026 it has utterly shit the bed with no discernible reason as to why.

Shit how, you may ask? Well elements are no longer dragging and dropping correctly on both Edge and Chrome. The dragging does work, and dropping throws an error because the dragged object in null.

Table column cell shifting and all of my movement functions have stopped working correctly, with no console errors at all.

It's as if my Javascript has just stopped workout correctly.

The biggest change has been a web server upgrade from Bullseye to Trixie, which involved upgrading Javascript and PHP to the newest stable versions.

However, this was maybe 3-4 weeks ago at this rate.

So perhaps the old Javascript was cached until recently?

I am at a loss. I've never seen things break with no indication as to why. I've been in web dev for 5 years now, and there's USUALLY a damn trail to follow.

At most restarting the browser via a manual reboot command seems to temporarily fix drag and drop functionality. Almost as though some corrupted cached file or setting is getting reset.

The html is building correctly, there are no backend bugs on our apache logs, and no sql issues upon saving.

Like why would dragging and dropping suddenly break in Chromium browsers? Did they push anything recently that bricked things?

I can't find anything indicating as such, and I am at a loss of how to debug this. It literally broke at 4pm on a Friday before this holiday weekend, and now I'm trying to get ahead of it before Tuesday.

Guys, this is my game dev account I made to post about our game and randomly chat on related topics.

It's annoying me so badly I had to join this sub and ask. It's the 11th hour at our job during busy season, and it would be an absolute pain in the ass to transition back to a giant excel sheet manually typing everything.

Any help, experience, or a point in the right direction would be a huge help.

submitted by /u/MalaiseEraMedia to r/webdev
[link] [comments]
  •  

Actual Fingerprints: An NPM package that creates synthetic fingerprints!

Actual Fingerprints: An NPM package that creates synthetic fingerprints!

I originally created this project to enhance realism for a GTA V Roleplay server. Recently, someone mentioned wanting to use these as default profile pictures for an upcoming social media platform. I decided to share them here in case they inspire other creatives. The fingerprints are seed-dependent and they consistent for an offline matching.

Source: https://github.com/1etu/actual-fingerprints

Research & Papers: https://1etu.github.io/actual-fingerprints/

Demo: https://1etu.github.io/actual-fingerprints/#demo

Credits & References:

  1. R. Cappelli, D. Maio, D. Maltoni. Synthetic fingerprint-database generation. International Conference on Pattern Recognition, 2002. Also the synthetic generation chapter of the Handbook of Fingerprint Recognition.
  2. B. G. Sherlock, D. M. Monro. A model for interpreting fingerprint topology. Pattern Recognition 26(7), 1993.
  3. P. R. Vizcaya, L. A. Gerhardt. A nonlinear orientation model for global description of fingerprints. Pattern Recognition 29(7), 1996.
  4. T. Y. Zhang, C. Y. Suen. A fast parallel algorithm for thinning digital patterns. Communications of the ACM 27(3), 1984.
  5. N. K. Ratha, K. Karu, S. Chen, A. K. Jain. A real-time matching system for large fingerprint databases. IEEE Transactions on Pattern Analysis and Machine Intelligence 18(8), 1996.
  6. A. H. Ansari. Generation and storage of large synthetic fingerprint database. Master's thesis, Indian Institute of Science, 2011.
submitted by /u/etulastrada to r/webdev
[link] [comments]
  •  

I built a local emulator for Gmail, Jira and Slack so my tests stop needing OAuth

I built a local emulator for Gmail, Jira and Slack so my tests stop needing OAuth

Last week I asked here how people test against third-party APIs they don't control. Most answers came down to the same thing: fixtures rot, and if you're disciplined you run something against the real API at night. I've been working on a small server for that problem and wanted to show it.

It's a local server that answers the way Slack, Gmail, Google Drive, GitHub, Jira, Notion and S3 do. You point the vendor's own SDK at localhost and it gets the same response shapes, cursors, auth errors and per-user permissions the real service sends, out of one SQLite file you control. No account with the vendor, no OAuth app, no token in CI, no network.

Why not a mock: a mock I write returns what I already think the API returns, so it can't disagree with me. This was built by measuring the real responses and matching them, and when it's wrong the fix starts with a test that fails against the real API.

pip install backlot backlot import --bundled # a small sample corpus ships with the package backlot serve # http://127.0.0.1:8000 

The server is Python (FastAPI) over one SQLite file, but it's all plain HTTP: anything that lets you set a base URL points at it unchanged.

The drift part, since that was most of the thread. backlot diff --source slack pulls the vendor's own contract (the published OpenAPI or Google Discovery document for the REST ones, live introspection for GraphQL) and compares it with what the server claims, in both directions, arguments included. Where the server contradicts the vendor, that's a bug. Where the vendor has something the server doesn't, it goes in a baseline file with a note, and that file only changes through review, so a run prints what's new and nothing else. In the GIF it prints one line: GitHub's spec gained an endpoint I don't serve yet. Run that nightly and drift stops being something you learn about from a bug report.

Things that were harder than I expected:

  • Slack doesn't document when a broken token gets not_authed versus invalid_auth. It took eight cases against slack.com to find the boundary.
  • The first version of the diff walked one direction and looked at fields only. It called Linear clean while ten fields and four arguments were missing on the side it skipped. A green diff that skips half the comparison is worse than no diff.
  • Every SDK builds its own path prefix, so each service has to sit under exactly that prefix or the SDK won't run unmodified.

Permissions are per user. Every person in the corpus has a token, and someone's private channel never shows up in another caller's listing, search included. Against the sample corpus conversations.list returns two channels while four exist, because the other two are private and real Slack won't list those without types=. If your client is an agent rather than a test suite, backlot mcp serves the same thing as MCP tools, and --user picks whose permissions apply.

https://github.com/brekkylab/backlot

If you already run something nightly against a real API, what would this need before you'd trust it next to that? And if the API you need isn't in there, which one? Happy to answer anything.

submitted by /u/Choice_Row_2025 to r/webdev
[link] [comments]
  •  

Is webdev still having human face?

Is webdev still having human face?

Hello, guys!

I am thinking about it for couple of dayys... In this times of web being developed, updated, supported and, most important, CONSUMED by AI agents and tools, does our work still make sense? Web development became skills.md, SEO is oriented to llms.txt more than on semantic html and so on. Looks like web started to live and evolve without our input. Probably it's my pessimistic look or simple burnout. But what do you think about this?

submitted by /u/rchuvilev to r/webdev
[link] [comments]
  •  

nOS4: A nostalgia right on your browser

nOS4: A nostalgia right on your browser

nos4 is a complete recreation of IOS4 running on web. It was just a little experimental side project but I've decided to make it live and open-sourced. It has all the original apps in the original form, also 2 games (and yes, it runs Doom)

GitHub: https://github.com/1etu/nos4

Also you can give it a try by visiting https://nos4.fun/

submitted by /u/etulastrada to r/webdev
[link] [comments]
  •  

I built a distributed web directory for exploring the open web

Recently I had an idea for a research tool, I realized I'd need to be able to find websites programmatically and the webs data is behind the largest corporations, not something we reliably have access to for being able to develop around.

So it got me thinking, how lightweight could you first build a crawler if you only cared about getting meta data (titles, description and the url)? Then it got me thinking, could we not share the load, create a distributed peer to peer network and make this data decentralized?

So what I have built is the open web directory. A network that crawls and builds a yellow pages like directory for web pages online.

You can setup your own node and contribute to the network by simply running:

git clone https://github.com/idev-games/the-open-web-directory.git cd the-open-web-directory npm start 

And open port 80 for that device by port forwarding.

I think this is going to be a fascinating experiment, it's early days so expect bugs and issues but give it ago and let's see if we can index the web.

Check out more info here:

https://github.com/iDev-Games/The-Open-Web-Directory

The site listed on github is the live front end (you can host the html files in the public folder anywhere to open another frontend on the web).

submitted by /u/iDev_Games to r/webdev
[link] [comments]
  •  

Is it possible to simulate a network of multiple API, Database and webservers on a single computer?

Hello, I have been thinking about a project I‘d like to try out, where I have like a Database, an api server and a web server. It‘s not too large, and mostly to learn about how they all interact. The issue is, I would prefer not having to pay for multiple servers to host everything. Is there a way to simulate how it would be in real life on a single machine?

submitted by /u/HelloMyNameIsKaren to r/webdev
[link] [comments]
  •  
❌