r/canadaguns • u/sometimesifeellikean • Jun 15 '26

Competitions/matches Looking for a couple of people to provide feedback on a firearm website.

I've made an app that I wanted to make for a while. It's really just a website and not installable yet, but it runs fine on a phone.
The main purpose of the site is to upload a photo of your target, describe the firearm / ammo used and then get your shot data from the photo. You can make friends and compete in a match with them too.
I'm privacy focused and you don't need to put in a name, and you can control your own data.
If anyone is interested, please PM me and I'll send you the URL.
PS. Not a Fed :)
PPS. I had to tag this post and didn't see one that I liked so I just put "Cometitions/matches" because this can possibly fit there.

3 Upvotes

57% Upvoted

12 comments sorted by

3

u/_Armpit AlmostProhibited.ca Jun 17 '26

Your website doesn't do any kind of authorization check on any of the endpoints. Meaning I can view your admin panel and things like guest information and details of whoever decides to make an account.

Luckily it doesn't appear that anyone has created an account to save things yet.

I hope that you are aware of that.

3

u/milanskiv Jun 17 '26

Vibecoding strikes again.

1

u/sometimesifeellikean Jun 17 '26

That's a part of the reason why I'm asking for testers. Thanks very much.

1

u/VoilaVoilaWashington Jun 22 '26

Sorry, you didn't do even that much testing? I'm guessing this is 100% vibe coded.

Vibe coding works... if you know what you're doing. But this feels more like using a dictionary to translate my essay from Latvian, then asking a friend to proofread it.

1

u/sometimesifeellikean Jun 22 '26

Did you login and try it, or are just reading a comment and going from there?

1

u/VoilaVoilaWashington Jun 22 '26

I read a comment from a random person, and then a response from the person who coded it.

Those two combined told me that the person who coded it didn't do even the most rudimentary testing themselves, or doesn't know how to.

1

u/sometimesifeellikean Jun 22 '26

Aside from the lack of encryption of session values (and possibly other technical issues), a ton of testing was done and I hope that you'll check out the source material (the actual website) to provide constructive feedback other than hacking defence. I'm grateful to the original reply that pointed out this issue, and saddened by the Vibe App that pretended that everything was done with security in mind. If you've got a few minutes, please give it a try and provide me with some additional feedback. You can PM me please.

3

u/Primary_Judge Jun 16 '26

Just like Ballistics X app?

1

u/sometimesifeellikean Jun 16 '26

I don't know. I've never heard of it. shotpattern.ca (free) and take a peek. I'll check out that one too.

Edit: I'm not spending $10 on it, so I won't ever know 😄

2

u/pr0cyn1c Jun 16 '26

REACT Spa?
Shame i have to register to see anything.

Edit: not a fan of DOM elements with biofeedback on events like hover that make you think they are clickable, when they are not

1

u/sometimesifeellikean Jun 16 '26

You could use the guest account. You don't need to register. You only need to register to save information into your personal account for future use.
I don't use REACT anywhere.
Can you please point me to an example of this biofeedback, the element, and your device info? PM is AOK.

2

u/pr0cyn1c Jun 16 '26

Sure i can do that. I can even tell ya what part of your css is the cause. Will send something later tonight when im on a pc