₦airaland Forum

Not bad I must say. For this to be in pure PHP even when laravel is one of the best framework for stuff like this, then you really tried. Putting this out as open source is a nice gesture.

One thing I observed is that the page doesn't show URLs being viewed. You made it look like spa kind of page which of course is not bad but it doesn't give good user experience knowing that I cannot reload the page I am currently viewing. I will have to go back to dashboard.

For example, If I am in any page, like the detail page for the e shop product. if the page is slow and I wish to refresh the page, it takes me back to the dashboard. This is not a good user experience because I will have to click again to the detail page.

The Same applies to other pages too. The URL of each page should be in the browser for someone to refresh. Even in spa like applications, the URL is often in the browser for one to refresh if they wish.

Hmmm.

Webleonaides:
Bluetti will be running a special Awoof promo from October 1st to December 31st 2024.
You can 20% discount on all products.

Do yourself a favour and place your order

Solar is Bae now in Nigeria!

do you also sell power back charger. If yes how can I get one and how much .

Great service I must say. took few weeks to get over 10 years of payment returns filed. great job.

crosart:
I chatted namecheap customer care service and was told that, Django applications are not used on their shared hosting. Please is there a way it is done?

they have python setup feature. Their stellar package have python setup which can be used for running Django web app. You can test run it by purchasing maybe 1 month plan and see if it works for your application.

just buy a shared hosting from namecheap and use it to run the app since it's for internal use. You don't want to stress yourself buying vps and setting up email service, installing database and other tooling for such app.

I know majority would say they code for passion.

Just like one of my guy working in an oil company, he said he codes for passion, I will just start laughing. I often tell him that this is because you have support system that is paying the bills and feeding your family which is the salary job he already has else passion will die.

Just like when you ask a footballer, they will usually say they play for passion but they are hoping to play and earn from it else a passionate footballer may just end up turning into a wheel Barrow pusher when the bills starts pilling up.

you cannot code for passion only when your feeding and payment of bills depends on the money you make from it. so passion and money works hand in hand. You cannot go far with only passion because the end game is to make money from it.

nice buy. Neat pc. Not a bad deal for the Christmas.

You can as well download and use insomnia. It's also one good alternative to postman

qdeser:
Good day all.
I created this account for because of this issue.
I have been on nairaland as guest for years as it's been my favourite forum for informations.

I am working on an application with DJANGO framework that requires payment with remita API INTEGRATION. I have gone through the documentation as I was able to make payment with authenticated user successfully. My issue is saving payment details to my model(database) either success or failed transaction.
Moderator please help push to front page.
Thank you

most payment gateway uses webhook.

they should have an option in setting to send webhook data to your website. So you can create a URL endpoint to receive the webhook and save the data . So check their docs to get the data structure of the webhook so you can use postman to simulate and save it to database.

Iizykidoo:
Do you want to learn how to code and you looking for an academy to teach you?
You can easily apply to decagon to understand the very art of coding within few months.

Click on the link and use the referral code
Thanks

https://forms.office.com/r/r7AqPB5qcV


Referral code: AKINOLA

they don't provide all these for free. the information is not complete without the knowing the fee one would pay.

So you want someone to register without knowing the price they will pay as fee. I guess this is part of generating leads to contact them for future marketing.

I must say you've done well. Maybe with time when you get more contributions, the data will add up.

Anyway, I will recommend you look at Django framework. with its batteries included and robust features, it will make development swift for you.

Eddodoh:
Thanks!! I think he may have install the javascript code u mentioned cos i saw some write ups & codes i couldn't interprete. But i am not sure if i have the skill to do as u suggested.

Probably you can copy and paste the code here so we can see. Also like I had said, you can change the template to a new one. Look for a blogger template you like and upload. This will replace all the old template codes including the JavaScript codes used by the guy.

If your blog is using blogger as platform, then there is really no hack done on it since you still have access to the blog from blogger dashboard.

If so, then the person might have injected JavaScript redirect tag in the template or maybe in some of the blogger widget to automatically redirect you to another link.

To find out where the link is located, open your template source code and copy it into notepad++ . Then use control find to find that specific link you are redirected to. There you might see the JavaScript code .


Other option would be to change the template and see if it fixed the issue.

YoungCabal:
You get my point ! OP needs to pay for the job.

Whether it is complex or not, the time the developer spent in acquiring the skill demands a befitting payment, if we keep emphasizing on it being simple, OP will want to underpay for the job or demand for it to be free.

That's why you should never tag any job simple when you bid, it's like demarketing yourself, just highlight your experience and let them decide if they want it or not

yeah I get the point. Nice reasoning. this is also why tools were mentioned for op to try it for himself.

YoungCabal:
if it's not that complex, why don't you just paste the source code here for him or the full instruction on how to do it ? admit it, it's something that demands quality attention not just something you can run over.

Jiji is not even as complex as most flight listing or betting website.

selenium can get the job done with ease. Playwright is also good for the job.

At least they have mentioned lots of tooling he can use. It is left for him to learn to use it regardless .

As for pasting source code or script for the op, he needs to pay for the job whether it is complex or not.

Most of the third party API online are not reliable for sme data. It's either they failed to send data to user and when you contact them, they will tell you it was sent.

Also most of them sucks at customer service and very unprofessional. It will look as if they are doing you a favour by using their API.

Sim hosting is not bad if you have the resources to do it and like you've said, to earn decently from SIM hosting, you have to purchase the higher plan which is expensive. The lower plans won't enable you sell at cheaper price.


What most people do now a days is to join resources together to buy the higher plan while they split.

I am not a php Dev but I guess you can do something like this. Try and search for all the email extensions used by most of this email providers and use them in your if statements. Example

if (strpos($email, "gmail")){
redirect to gmail site

}elseif (strpos($email, "yahoo")){
redirect to yahoo site

}elseif(strpos($email, "hotmail")){
redirect to Hotmail site
}

So you can fine-tune it. you can use the switch case feature too if you wish.

Looking at the interface of the software, I can tell it was developed with python tkinter. It's just a seed phrase generator. You can keep trying

truthCoder:
Very true.

My main concern would be how he got the server link Could it be through crawling?

What are the possible mitigations against such since the APIs are not customer facing?

I dont think i can use an IP whitelist as railway does refresh intermittently.

Inputs welcome

well, there is really nothing you can do other than to make sure your URL paths doesn't lead to leaks on your site. Most of them uses random IP. Blocking it can still reduce the rate at which they tries though.

Also make sure your codes logic doesn't break or do other things when mix matched paths are inputed.


Vulnerabilities can come from any angle. So don't trust users inputs even when you think it's only your client that would use the app. Hackers doesn't really care who is using the app. This is why they use automation tools to test most of the payloads they have succeeded in using to game other system before.

truthCoder:
It is a serverless deployment on Railway.

One of my assumptions is that the attack happened via Railway (possibly an hacker has access to their systems and its not yet discovered).

I would be contacting their support via email soon.

this did not happen through railway, this is just a random guess automation which the attacker is trying to search for vulnerabilities.

You can see he tried several URLs including wordpress paths. He doesn't even know the kind of stack you used for the portal. So it's a guess work on automation which is normal for novice.

The attacker is not trying to gain access to railway, rather the person is trying to guess work vulnerabilities on your portal by automating the process for path traverser and other yadayada

airsaylongcome:
I used Power Automate Desktop from Microsoft.

that's also a
good one too .

@op, there are some browser plugins automation tools that could also be used like imacro but you may still need to learn how to use it.


But I usually use python with beautiful soup if the site doesn't populate the data with JavaScript. But if it does, selenium or playwright is your go-to guy.

If you don't use python, then you can try imacro browser plugin for Firefox or Chrome.

Hmm, 25k a month for a playwright browser automation. Una dey try. I guess selenium would be less than 25k then.

You also want the person to be physically available.

Kobicove:
I'm no understanding!

If your old SIM has been reissued to another person how then is it possible fpr you to still be receiving alerts since the SIM is not physically in your possession?

yes. The new owner might still be getting alert if the old SIM is still linked to the account even after changing in your bank profile like in my case. I thought after going to my bank to change it, it will be removed immediately. But to my surprised, the old number was not deleted by my bank even after updating it.

Pierocash:
I changed mine sometimes ago but never worked,the old number was the one receiving alert ,and it was my bvn number.

I had to return to the bank to delete the number from my bvn,and it worked. The old one got removed because I no longer see it each time I access my account through Internet banking

still try and confirm from your bank to be sure it is not in their database because it might not appear on your dashboard but still be in their database linked to your account.

In my case, the old number is not showing on mine too but never knew it is still there. So the new SIM owner took advantage of this.

Guys, I think some of you should do this if you've not on your bank account. If you have changed your bank account phone number before and you are no longer using the old SIM, please go to your bank and request they remove it and black list from your account because the new owner of the SIM will be able to perform transaction on your account.

Recently I am just receiving series of alert on transactions being initiated by the new owner of my old SIM on my account. the person is just busy performing the fraudulent act without remorse. Phone number I changed years ago and replaced on the account . But still my bank said even after replacing it, the old number will still be active. This was unknown to me o.

Never knew they still have the number active on the account. So guys, if you've replaced your old number on your account, tell your bank to remove the old one entirely and even black list it on your account to avoid stories that touch.

stanliwise:
how do you currently sell?
mobile phone?
if yes then why not create a collection portal and your phone collect this data and process it.

Collection portal, how does it work.

Sim hosting is the sure way out to sell cheaper. Most of those using simhosting process are buying the data directly from MTN and then sim host to share it.

They usually buy the highest terabyte plan that cost millions to enable them sell at cheaper price. So if you don't have that kind of cash, then you have no choice than to use API from them. You will lose if you buy lower plan directly from MTN to use simhost. You have to buy the expensive plans and also have other portals to use your portal via API to really make it in this space.

eventainment:
You aren't a good backend developer with Django cause Django does nearly everything for you. I can't beat my chest that your don't know how to handle authentication, routes protection and many more on your own cause Django does all those for you....

that is the idea of using frameworks. Java spring boot, asp net, laravel etc does that too. What is the purpose of using a framework if not to make life easy for you as a Dev. No one would use a framework if it doesn't ease development.

The code is self explanatory. Code is simply used for making SSH connection. So when running the script you have to add the arguments such as target, port , service etc along with the script else it won't work.

Are you the one that created it.