• Mikina@programming.dev
    link
    fedilink
    arrow-up
    2
    ·
    3 months ago

    Please, whatever you eventually choose to do, make sure to continually reference this amazing website whenever you are implementing any interactable part.

    https://cheatsheetseries.owasp.org/

    It has cheat sheets for securely implementing everything from login forms, preventing common vulnerabilities (at least look at sheets for Top 10), forgoten password flows, storing passwprds and more.

    From the top of my head, If you are building it from a scratch without a framework, you will definitely want to at least look into cheat sheets about input validation, injection prevention, password storage, session management, file upload and authorization with authentication.

    They are not that long, and should prevent the most critical and common vulnerabilities you will probably have, where the prevention isn’t too difficult, once you know about it.

  • MonkderVierte@lemmy.ml
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    3 months ago

    HTML, then CSS, then JS if needed, for functionality you can’t do with HTML and Backend.

    And read up on HTML tags, please. There’s too much div-only crap already.

      • MadhuGururajan@programming.dev
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        they don’t solve them. They make it harder for you to make mistakes. Doesn’t stop a capable developer from still introducing vulnerabilities.

        that html page without js and just links is MORE secure than anything with JS.

  • 11111one11111@lemmy.world
    link
    fedilink
    arrow-up
    3
    arrow-down
    7
    ·
    3 months ago

    Open browser, select search engine of choice, click in the search box, type, “make a dynamic website from scratch,” click search.

    • UlrikHD@programming.devM
      link
      fedilink
      arrow-up
      1
      arrow-down
      1
      ·
      3 months ago

      If you don’t have anything positive or helpful to say, it would be better to just not reply. If you think the post shouldn’t be posted here, use the report function instead.