₦airaland Forum

truthCoder:
don’t quite get why i would deploy a mongo db instance only to now hack at it with mongoose.

No offense boss, but i think we should take it easy with opinionated responses; as you could easily and mistakenly mislead somebody with what you think is true.
The above statement is akin to saying "don't quite get why i would deploy a javascript project only to now hack at it with React"
you get it now, don't you? Nobody is stopping you from writing a complete app with just html, css and js files. In fact, that's what web dev used to be, right? But at least, you don't need to be told what React does to that process.
Now substitute mongodb for js and mongoose for React; and you will get the bigger picture. In other words, nobody is forcing you to use mongoose. Heck, you could forge a complete app without it.
Most people often forget mongodb is the native driver. And working directly with drivers require skills. Do it if you that's your style or just use an abstraction and speed it up, if that's also your style.

truthCoder:
Relational databases are time tested and are actually the more practical option in many instances. Imagine the headache involved in deploying a banking app with mongodb.
.

I like to learn a lot. Please can you mention one practical headache (with proof if possible and not hearsay) ?
Thanks

bodunde:
Spectranet LTE is the best in Lagos in terms of speed and data consumption.

So you mean Spectranet is in every part of Lagos and it's fire ??
wonderful.

As so it will happen as it happened with oil:

Oil:
We have the crude oil, yet we export it out to be refined and buy it back at higher prices. Citizens bear the brunt

Lithium:
We "have" lithium, but again we will export it; and then import back the batteries and cars. Once again, citizens will bear the brunt.

The country is a joke!

Na wa o,, una get time.
you guys don't have Jira tickets to attend to, PRs to push
or standups to attend?

sexysunnyb:
You just spoke my mind
I watch Netflix and Youtube with my 4G using my smart TV without interuption
I dont know if this 5G is for watching Heaven live

Bandwidth brother, bandwidth.
It's just you in your single apartment or maybe 2 -3 people, 4G is good enough for you.
Are you aware there are families of 6, 8 even 10 living together in one house sharing a single wifi connection?
How about people who stream live on YT? or who have regularly uploads Gigs of video
Take your 4G there and watch it suffer. It would be too slow.

truthCoder:
You dont own this thread. ...
But you see this one created by Seun, you dont own one single pixel of it and i will comment anytime and on any thread.
.

How can you be so sure, mate? What if he bought "backyard Nairaland stocks" from S3un ?

Better safe than sorry. However, if you are going to be having hundreds of thousands plus users; and worried about simple things as DB costs, I say you double check your business model. You aint' running a charity; are ya?
And where would you be hosting this MySQL instance? self-hosted or cloud-based?
what's the cost ratio Mysql:MongoDB?

Raylight2:
Interacting. It's a social media platform

MongoDB (Atlas) free version is good for you and free at 512MB RAM. By the time it starts to choke, you or whoever owns the app should be making enough to pay the next tier $9/mo 2GB RAM. You can see I am more concerned about RAM than ROM; because that will determine how many concurrent transactions can happen at the same time. Low ram == DB crashes
Or AWS DocumentDB (essentially MongoDB) free for 1 year on T3 Medium compute (2vCPU, 4GB RAM) and 5GB backup per month.
If after this time, you or whoever owns the app is still worried about paying for DB costs with an exponential surge in users (aka freeloaders) then water don pass garri. Good luck.

JoyousFurnitire:
I didn't mention that he lied na

I only want him to share with us how, please do.

I wasn't necessarily referring to you saying "he lied". Just for the Judases who might think "he lied", ya dig?
Of course, I once had a portfolio that somebody saw and liked. And that was it; since then all my jobs have been via referrals.
There were practically no interviews in the sense of it; I would call them 2-way technical dialogues as the jobs were pretty much assured as I was strongly recommended. I never bothered to update the portfolio ever since.
And then I had one solo where I applied myself. My resume was enough for them as it contained contacts of those I had worked with in times past and nobody bothered asking for a portfolio. And that's how it has remained till today.

caveat emptor: don't be like me

Raylight2:
I am developing a website and I think I made a mistake using mongoDB instead of MySQL. I said that because of the pricing when it comes to hosting. I am confused on what to do now. The site would have thousands of users when launched so I'd need a large storage. I have checked Atlas, AWS, DigitalOcean. their pricing drives cold down my spine. What do you suggest I do please?

Pump your brakes buddie.
Thousands of users don't translate to anything meaningful that would require a panic attack with regards to storage costs.
My first question would be:
Thousand of users doing what? i.e. what would these users be saving (adding, or storing) in your DB?
And how often are they doing what they are doing in terms of transactions per second?
And what would be the read-to-write ratio i.e are they always saving something or mostly just viewing something?

JoyousFurnitire:
Tell us about it, how do you get jobs without a portfolio site?

OP where do you reside?

He's not lying. I don't have one either. My circle of friends too. None of us do.

tensazangetsu20:
This is not true. Dorm cards don't work for everything. I couldn't even help someone pay their school application form fee with a dorm card.

As long as you're sourcing your own dollar, then technically there are no restrictions on where to spend it.
Technically for the exception blacklisted websites, spam houses, fr@udulent and money-laundering sites or gambling sites. or sites run in countries under embargoes.
So they do sir; all the time. For issues like this, contact your bank.
The problem is not the card or mechanism.
I have had times when my local Naira card even stopped working and I could have reached the same conclusion as you have now.
Check the importation thread, even people with different cards from the same bank have different results.
But if it worked for A; should work for B, unless B has issues with his account that needs rectifying. Happens a lot in banking.

Can i order standalone battery items from AE? e.g. replacement batteries for laptops & mobile phones?

p.s.: if you want to share what you've done, then i'd be much obliged to see it, sir!

@donproject2

I'll highlight your concerns in "strong" text and my answers in black

Moving on. Before I start learning new tools, I always love to be convinced that such tool is worth my time and may be my money.
Without arguments, Nextjs is one of the best frontend frameworks, no cap! A few comparison videos on YTube will clear your doubts. These days they even work together with the React to ensure any new React features are incorporated. One good example would be internationalized routing by default i.e. setting up different locales for your project. So a user in France sees your app in French and a user in Nigeria sees it in English, or one in Spain sees it in Spanish. Of course you have to provide the content or use something like i18n but then Next will automatically detect the locale and serve the appropriate page; without waiting for the page to load and have the user select the appropriate language. If you think about it deeply, that's more like server-side logic for static pages; 2 different paradigms that shouldnt naturally coexist and Next makes it happen.

I remember what you said about all-in-one package (fe + api) , I never knew Nextjs has that capability. This literally means I can eliminate Express for building APIs with NExtjs(I believe I am not wrong).
Yes, you aint wrong. In fact, you could build out your API's only without frontend and then that would be a direct replacement for an Express API app. Which means you could do FE only, BE only or both if you wish to.

I could separate routing and the actual API functions (controllers) and matrch them together later, for cleaner code, I know with Next, folder structure (inside the api folder created by Next) and the name of the file serves as the API endpoint when needed to be called from the Frontend. This is cleared out
Yes, Then there is the more advanced one called the Edge API routing. They dont' use the native Nodejs runtime but the Edge runtime i.e. they are built with standard web apis. And you can do one powerful thing with this.... Streaming!

I could create Middlewares that must return TRUE in order to allow next function called close to it to be called, i.e I can use a kind of authentication on selected routes, these routes are only accessible if the middleware called before them returns TRUE. Can you tell me I can do this with Nextjs as well.
Oh yes, Nextjs has middlewares as you would do in Express and more. Authentication? check. Bot protection? check. A/B testing? check. Localization? check. If you don't like the automatic locale detection mentioned above, then you could use middlewares to serve the correct content for a locale.

truthCoder:
You dont need to tell us client details or other identifying data.

Did you build a website?
What did you build what you built with?
What tools were used?
What frameworks, if any?

For example: I built a static school website with 10 pages. I used only html and some vanilla JavaScript.

I submitted after 10 days and the client was ok.

Something in that line

Stop wasting your time, he's capping!

truthCoder:
One other solution is to get an international account and get a card on it.

For example, It is easy to open an account in an ECOWAS country and you simply fund it via p2p with a trusted agent.

I wont be sharing explicit details here so the bandwagon does not crash it, as usual. Those who can read and understand would have gotten it.

That's even going too far. A simple dorm account with VISA cards work all the time.
Or for the creme de la creme, a bank account in the United States, at a cost of $500.
caveat: comes with too many paperworks, and then remember Uncle Sam vs Wesley Snipes.

truthCoder:
Naira Transfers to third parties is a hit or miss.

It would tell you the transaction is pending and would give a later date of up to 48 hours.

It is only transfers to your own bank account that happens in minutes.

I wouldn't know in your own case but in my case, all transfer happens in mins. I have never transferred to my own account, i have no use case for that. I only do external transfers and have transferred to almost every bank account supported and it's always less than 2mins. Maybe because I was an early adopter, I wouldn't know. No ideas. But what you're saying is strange in my situation.
p.s. yu should prolly contact the "slow" helpdesk and see if something is wrong back there.

truthCoder:
The only drawback i have with Chipper is that if you try to transfer Naira out of your account to another account, it might take more than 48 hours. The reason, i dont know.

~48hrs is Weird, happens in less than 2mins each time I tried.
plus the USD card works anytime and everytime. it's even currently linked to my USA paypal account
smooth sailing.

talk2hb1:
Cene Paz necessary

c'est ne pas

truthCoder:
Come to the church of sveltekit.

Our approach to the gospel is a bit different.

Looking forward to seeing you on our evangelism team very soon

For today, I am a proud atheist

After spending close to 2yrs w/ Svelte, i still hate it.

APC wanna give Nigerians one final "chopping" for the road.

We shall get there eventually!

truthCoder:
Ok. I would look into your suggestions now.

Thanks so much.

Anytime, boss!

I thought as much. Well in that case, what you want is a log drain or log sink; as it's technically called. AWS has something called CloudWatch. Not saying you should use it though, but mentioned it as a pointer to what you need.
There's also DataDog and New Relic. Just connect your app to any of those and let the traffic flow through them. You don't need to maintain a blacklist, as they will log and sort every request for you in very nice formatted charts and what nots; which could be exported; so you can analyse all you want.

airsaylongcome:
Tell you an experience we had at work yesterday. (Yes some of us started the grind yesterday). So because I'm in telephony, our systems are frequent targets, especially by bots from China and.....Palestine. The aim of the bots are to initiate international calls to premium numbers abroad. Think "seks" hotlines and OF lines. Or to Palestinian mobiles (don't know how the Palestinians profit from this but they are huge). So my colleague in Buenos Aires (lawyer turned techie) opened the well-known RDP port on his home router so he can access his work PC while way from home. Omo! Dem run the guy street. They used up his voip.ms account leaving him with a debt of $2k. I accomplish the same scenario (RDP access to my work PC) using a software service called Tailscale. Now, I have to train the rest of my colleagues how to use Tailscale.

So I fully understand how frustrating it would have been for you dealing with the hack attempts

What a bad situation to be in.....
Security 101 states that don't allow every tom, d and harry inbound IP address into a secure network. If he had opened port 3389, then he should have locked it to an IP addresses or ip addresses he trusts. The only major drawback here is having to deal with dynamic IPs from ISPs and in such a scenario, just get a static VPN as a secure tunnel back to the private resource. I run piHole at home, and since port 53 has to be publicly accessible to resolve, it is blocked and only allows responds to request from from my VPN. So to use the piHole, you gotta connect to the vpn first. if my ISP was static, i wouldn't need the vpn. It is what it is.

truthCoder:
Update:

I have created a blacklist where IPs that are running scripts on the endpoint are added. This array is global and prevents access to all resources permanently.

Quick question: how do you intend to handle this blacklist? because it will grow exponentially over time. It's easier to manage a whitelist because it will have fewer entries to traverse than a blacklist with say, 200k IP addresses, which means on every request, you will be potentially looking up 200k ip addresses?

if you already have a whitelist, then there is no need for a blacklist; or what is the need? i want to hear your thought process.

This wants to be used for phishing. After the user would put their credentials (email + pass) in your clone (phishing page), they would be redirected to the original & legit email website (cos they were probably logged in before, thanks to cookies). A yahoo user would go to yahoomail, a gmail user would go to gmail. They would think all is fine, not knowing they came from a clone page.

Giveaway: if a user would register on your app; they should be redirected to either
1. confirmation page.. please check your email for verification, or
2. user dashboard

not to their email's website.

I "do not" stand corrected.

tensazangetsu20:
Hmm I really didn't mind that to be honest...

Pursuit of happyness: will smith's son said he dont mind sleeping in the toilet at the train station with his father. he replied: "someday, you'll mind". And even if you decide not to, who knows you could be the presidential aspirant and then, your opposition would mind.
It was primarily taken down for having data of persons not even related to the drama in the first place.