Lena Fischer

Replit agent deleted my .env when I asked it to clean up

Firebase rules let anyone read my whole users collection

RLS blocks my own inserts from the app but the dashboard works

Subscriptions for a dog grooming SaaS, review my webhook and plan gating

Built my first SaaS with Lovable, would love a security gut-check before launch

ChatGPT suggested storing JWT in localStorage, is that bad?

Hiking trail guide on Firebase, 900k reads overnight and nobody was awake

Internal CRM in Bolt, is it okay that everyone sees everything?

Bolt app is slow after adding 2,000 rows to one table

Users say the site is slow but Lighthouse says 95

How do I let users upload a profile picture without exposing my bucket?

Portfolio CMS in Lovable, 8 MB photos and the bandwidth bill is climbing

Where do I put my OpenAI key in a Windsurf frontend app?

Salon booking app, Claude Code, would love a security pass

Is it safe to paste my database URL into Cursor's chat?

Lovable app: users see each other's data after login

Do I need a backend at all for a Lovable app with Supabase?

ChatGPT wrote a scraper, now the site blocked my IP

Claude Code committed my .env.local to GitHub

School newsletter generator calls the API from the browser, is my key burned?