News PSA: Upcoming Critical PHP Security Release
wordfence.comThe release fixes two critical vulnerabilities, both rated 9.2 on the CVSS v4.0 scale.
r/webdev • u/AutoModerator • Sep 01 '26
Due to a growing influx of questions on this topic, it has been decided to commit a monthly thread dedicated to this topic to reduce the number of repeat posts on this topic. These types of posts will no longer be allowed in the main thread.
Many of these questions are also addressed in the sub FAQ or may have been asked in previous monthly career threads.
Subs dedicated to these types of questions include r/cscareerquestions for general and opened ended career questions and r/learnprogramming for early learning questions.
A general recommendation of topics to learn to become industry ready include:
You will also need a portfolio of work with 4-5 personal projects you built, and a resume/CV to apply for work.
Plan for 6-12 months of self study and project production for your portfolio before applying for work.
r/webdev • u/AutoModerator • 20d ago
Due to a growing influx of questions on this topic, it has been decided to commit a monthly thread dedicated to this topic to reduce the number of repeat posts on this topic. These types of posts will no longer be allowed in the main thread.
Many of these questions are also addressed in the sub FAQ or may have been asked in previous monthly career threads.
Subs dedicated to these types of questions include r/cscareerquestions for general and opened ended career questions and r/learnprogramming for early learning questions.
A general recommendation of topics to learn to become industry ready include:
You will also need a portfolio of work with 4-5 personal projects you built, and a resume/CV to apply for work.
Plan for 6-12 months of self study and project production for your portfolio before applying for work.
The release fixes two critical vulnerabilities, both rated 9.2 on the CVSS v4.0 scale.
r/webdev • u/iconisone • 1h ago
Last two days was hell using Railway. We couldnt update a single project or make any changes in our system. After more than 24h Railway is still in chaos. Two separate incidents. Major outage even support is down.
But this is not the first time Railway failed.
For over a year Railway had few major issues that made working on it impossible. I was hoping they would stabilise but at this point Im past disappointed.
I know they rely deeply on Google cloud, but this proved to be a very bad decision, multiple times. And they never made required changes.
Can someone recommend a more stable alternative?

r/webdev • u/quietcodelife • 2h ago
been at a larger company (think 500+ devs) for about 4 years now. pretty comfortable with the setup but starting to feel like just another cog. thinking about moving to something smaller like 10-30 person startup.
for those who made that jump - what surprised you the most about the infrastructure side? im used to having dedicated devops, proper ci/cd pipelines, monitoring dashboards for everything, on-call rotations with actual runbooks.
curious if smaller places just... wing it more? or do you end up wearing more hats but still having solid practices. not really worried about the tech stack itself, more about the operational side of things.
also wondering if the "move fast break things" mentality is still a thing or if that died with the 2010s
r/webdev • u/quietcodelife • 2h ago
been at a larger company (think 500+ devs) for about 4 years now. pretty comfortable with the setup but starting to feel like just another cog. thinking about moving to something smaller like 10-30 person startup.
for those who made that jump - what surprised you the most about the infrastructure side? im used to having dedicated devops, proper ci/cd pipelines, monitoring dashboards for everything, on-call rotations with actual runbooks.
curious if smaller places just... wing it more? or do you end up wearing more hats but still having solid practices. not really worried about the tech stack itself, more about the operational side of things.
also wondering if the move fast break things mentality is still a thing or if that died with the 2010s
So I kept seeing "faster than tsc 7" claims for these Rust ports and got curious whether they hold up on real code rather than toy benchmarks. I've got two TS repos for my SaaS, a backend (~1,120 files) and a frontend (~1,160 files, mostly tsx), so I ran all of them.
Warm runs, median of 5, Linux VM:
| Compiler | backend | frontend |
|---|---|---|
| tsc 7.0.2 | 21.0s | 6.5s |
| bun check (1.4.3) | 1.7s | 2.4s |
| tsc-rs 0.7.0 | 1.4s | 2.4s |
| tsrs 0.11.0 | 0.8s | 1.3s |
| tsc-ts 0.0.5 | 2.0s | 2.7s |
Honestly I expected at least one of them to quietly miss errors, so I broke a copy of each repo with 3 type errors. All four caught exactly what tsc caught, same messages.
tsrs is clearly the fastest, 28x on the backend. But it's one person's dev snapshot, built against 7.1-dev while I'm on 7.0.2, and it exits with code 2 instead of 1 on errors, so CI scripts need a tweak. tsc-rs says in its own README that it's experimental and mostly written by an LLM. tsc-ts is at 0.0.5.
I went with bun check in the end. Not the fastest, but I already use Bun, it's an actual release, and 21s down to under 2s is plenty for me. I'll look at tsrs again when it gets a proper release.
r/webdev • u/Stephcraft • 1d ago
r/webdev • u/FlamedDogo99 • 1d ago
I got DMCA'd on a web project that adds mobile touch support to another project that has been used to infringe on Microsoft's copyright. My project did not contain any of their intellectual property though, and I'm not seeing what they are actually claiming my project did, outside of generally infringing. Do y'all know how to get more info on these claims? I was thinking this would be the place to ask for web-related content.
Edit: The verdict appears to be:
Even though this was not made from the problematic repo, and doesn’t include any of Microsoft’s property, the fact that it could enable someone who ended up with a build without owning the Microsoft product to use it on mobile is enough for them to take it down
This is microsoft investigating microsoft and finding themselves blameless, so regardless of legality it was doomed from the start
I appreciate y’all taking the time to give feedback!
r/webdev • u/thicctak • 4h ago
I'm currently only working with a single 24" monitor because I'm moving, I sold my third monitor and my secondary monitor shat the bad, it'll be a while until I can buy another monitor so I'm want some tips to improve my dev experience on single monitor, maybe using a tilling window manager, or some other software to improve this. If I can make it work, maybe I even stick with just one monitor, because multi monitor setups are kind of a hassle to maintain haha.
r/webdev • u/DankHeehaw • 18h ago
So I wanted opinions and your experience on using platforms like codespaces, Gitpod and coder
TLDR, my SSD died and i switched to a desktop, now cuz of that i moved most of my on the go workload to my laptop
I tried codespaces and it worked well but i guess I was just fumbling git cli too much cuz of my over reliance on the desktop app
how is gitpod and coder over codespace?
r/webdev • u/Key_River7180 • 3h ago
r/webdev • u/Out-Live-In-Death • 1d ago
As a software engineer, I’ve been thinking a lot about AI and the future of our profession. I use AI myself, and I’m genuinely excited by what it makes possible. But the more I see people celebrating the automation of human labor, the more I find myself wondering whether we’ve stopped thinking about what all this progress is actually supposed to accomplish.
And by we, I mean those of us building these technologies, the engineers enthusiastically finding new ways to automate work, the founders and executives racing to reduce costs, and the workers who feel compelled to participate because they know that if they don't, someone else will. I'm not exempt from this, either. I benefit from the same technologies I'm questioning.
I understand the incentives. We all want to get ahead, secure our futures, achieve financial independence, and eventually have more freedom over our lives. In a competitive environment, refusing to adapt can mean falling behind. But why have we become so comfortable treating other people's livelihoods as acceptable collateral for our own advancement?
We celebrate making one person as productive as ten, rarely stopping to ask what happens to the other nine. We want technology to free us from work, yet our ability to survive remains dependent on having work. We resent corporations accumulating extraordinary wealth and power, yet many of us aspire to build or become precisely those institutions. We want community and human connection, yet our incentives encourage us to treat one another as competitors.
And there are other contradictions I can't quite reconcile.
We celebrate efficiency, but to what end? If we can produce more with less human effort, shouldn't that translate into more leisure, security, and freedom for everyone? Why does increased productivity so often seem to come with greater pressure to produce even more?
We tell people to adapt or risk being left behind, but what happens when everyone adapts and the jobs they're adapting for disappear anyway? We celebrate individual merit and hard work, yet technological disruption can make entire skill sets economically obsolete regardless of how hard people worked to acquire them.
We talk about AI as though it will solve humanity's problems, but technology doesn't determine who benefits from its output. A world with extraordinary productive capacity can still leave people struggling to afford housing, healthcare, and a dignified life.
I don't think people are necessarily cruel or indifferent (though some definitely are). Perhaps most of us are simply trying to protect ourselves in a system where falling behind has real consequences. Perhaps even well-intentioned people become participants in a race nobody individually chose, but nobody feels safe stepping away from, either.
But understanding why we behave this way doesn't mean we shouldn't question where it leads.
Imagine if AI genuinely made human labor largely unnecessary. That could be one of humanity's greatest achievements: less time spent working to survive, and more time for family, friendships, art, music, exploration, and simply being alive.
But what good is eliminating the need for human labor if we don't also eliminate people's dependence on selling their labor to survive? What have we liberated ourselves from if people are still terrified of becoming economically unnecessary?
I don't think the answer is to stop innovating, condemn ambition, or expect individuals to sacrifice their futures for strangers. I just wonder whether we've become so focused on optimizing our individual positions that we've forgotten to question the collective outcome.
We're all on this planet together. Most of us want remarkably similar things: security, meaningful relationships, autonomy, dignity, and the freedom to live our lives without constantly worrying about survival. Yet we participate in systems that can make those things harder for one another to attain.
Are we trying to build a better world for humanity, or are we simply trying to secure the best possible position for ourselves within whatever world emerges?
And if we're doing both, how do we reconcile those goals when our individual incentives so often undermine our collective interests?
I'm genuinely interested in how other people in tech think about this, especially those of us actively building the technologies transforming the nature of work. I don't have a solution, and I'm not claiming to be above the problem. I just think we should be asking ourselves what all this progress is ultimately for, before we get so caught up in what we can do that we forget why we're doing it.
And I'd invite discussion beyond pure game theory and economics, but more to do with psychology, maturity, emotional development, self-worth, dark triadic traits, and similar.
I’ve been using this daily for a while, so I thought I’d share it.
It’s a lightweight news reader that pulls from multiple sources (BBC, The Hindu, Times of India, NDTV, TechCrunch, etc.) and shows them in a clean card layout.
What I find useful:
- Tap on any topic tag to choose the topics you’re interested in
- Tap on a news source to configure which sources you want to see
- No login required
- Works well on mobile (swipe through stories)
Link: https://dailynews.nocod.dev
Would love honest feedback — what’s missing or what would make it more useful for you?
r/webdev • u/damonmowr • 2d ago
r/webdev • u/HeraclitoF • 1d ago
Hi there,
One Customer just asked me for a Du-Sie Switch in the page, same like any other language switch.
This is my first time doing this.
Is this normal?
Are there also (Slang or street) language switches?
Edit: I just implemented as another language i18 de-DU with xliff files
Processing img 5pvzei79hnwh1...
r/webdev • u/Little-Rice4987 • 9h ago
Anyone can open Claude Code and ship a working CRM in a weekend. Auth, dashboard, CRUD, deploy. Ugly, but it runs. Full stack isn't dead.
But path is moving towards from being domain specific to solving real problems.
Agents handle research->execution->iteration but only valuable if backed by logical reasoning on top of first principles.
I am refining this by having hands on non conventional problems especially whose research papers got recently released and provide enough base to start building.
EcoAudit. Point it at localhost:3000, it flags energy smells in the running app. No LLM, no ML. Built from a paper. Repo · Demo · Paper
AgentBlame. Git blame for AI agents, graph based root cause analysis. Built on AgentGit. Repo is empty, I'm starting now. Repo · Paper
Gemma 4 Kaggle. Next. I'd rather learn core AI engineering than build a fifth RAG wrapper. Competition
My credentials Portfolio · Resume for reference.
Want your all opinions on what approach should we pick to have differentiating factor in this agentic development era?
Feedbacks, critiques and dms are always welcome.
r/webdev • u/Prachitech_9354 • 1d ago
Ever tried clicking a button, only for the page to move and make you click the wrong thing?
I've been thinking about how website performance is more than just loading speed. A page might load quickly, but if things keep moving around or buttons take too long to respond, the experience isn't great.
That's where Core Web Vitals come in, but I'm curious how developers handle these issues in real projects.
Do you usually focus on loading speed first, or on making sure the page feels smooth to use?
r/webdev • u/shmurrie • 1d ago
r/webdev • u/Perfect-Brick7389 • 2d ago
We all got the same 9am calendar invite on the 30th and by lunch about 40 of us were done, me included. Seven years as the only brand designer at a regional craft soda company.
Two weeks in, and every recruiter I talk to asks for "a link." My portfolio is a PDF from 2019 and my Behance hasn't been touched since 2020. The top project on it is a label for a flavor we killed in 2021. Do people hiring even open a PDF anymore?
What's killing me is that the only work that'd get me hired, two can redesigns and the full rebrand, is under NDA until it launches in spring. How did you handle NDA stuff when you were job hunting? I've seen people blur the logos but that feels sketchy to me.
Friends keep saying Cargo, Squarespace or just update the Behance. Does the platform even matter to whoever's hiring?
No clue how much to put in either. Everyone online says go deep on a few, but that job was a LOT of sell sheets and six-pack carriers and I can't tell what's worth a damn anymore.
If you rebuilt after a layoff, how long did it really take? I gave myself two weeks. So far I've rewritten my LinkedIn headline three times and opened my old InDesign files and closed them again.
Severance runs out in January. Tell me how yours went, I need to hear from people who came out the other side.
r/webdev • u/HotWriting9306 • 19h ago
Just because everyone knows how to write doesn't mean everyone can be a great author. It takes crazy imagination, deep thinking, and immense effort to write a book that truly moves its readers.
Similarly, AI might make writing code easier, but building a great product still takes deep thinking, thoughtful architecture, structure, and countless hours of focused work.
Let's be real here: we weren't writing thousands of lines of assembly before AI came along, were we?
Software development has been getting easier for decades. From transistors and assembly to C, C++, Java, Python, JavaScript, frameworks, libraries, APIs, and open-source software, every generation built on the last, making developers more productive.
I know AI came shockingly fast thanks to the worldwide "Manhattan Project of AI," backed by trillions of dollars and armies of brilliant engineers. But the underlying direction isn't new.
Web Development for example. Non-coders were already building websites and online businesses with WordPress, Shopify, and Wix. Developers weren't building everything from scratch either; we had stuff like React, Angular, shadcn/ui, and countless open-source tools.
Being imaginative, sharp-minded, unique, and creative has never been more valuable in our lifetimes. Don't lose your passion and make the most of it!
r/webdev • u/fagnerbrack • 1d ago
r/webdev • u/TampaVinDog • 1d ago
How do you like this company for hosting? We're looking to switch website hosting.
We have a virtual machine that we've managed for 12 years on pleskos and it's now outdated with centOS and the company isn't helping us move into a better VM. So I think it's time to switch and I've heard ionos is pretty good. What do you think?
r/webdev • u/Illustrious_Skin8783 • 1d ago
Hello everyone,
I just want to know how I can make and host a basic website for a book community.
I know basic Embedded programming, I want to store user data, books they have, location, people can request the books, the website should be free....,(Edit: Or very minimal amount I can spend, like 2 USD for a month....) As I'm not doing this to earn..., vercel or Cloudflare or somewhere else?
Thanks in advance
Post script: Someone commented let's talk I got the best options, but before I respond, the mods removed that comment...
r/webdev • u/shufflepoint • 1d ago
Tried Chrome and Edge
Tried setting document.body.style.cursor = "wait"
and tried document.documentElement.style.cursor = "wait";
I recall these working previously. Did something change? Some org setting?
I don't see the value being set to "wait" in the element inspector. But when I set it back to "auto" I do see that value. So it's like the browser is ignoring the setting only if I set to wait.
EDIT:
Thanks everyone who offered ideas. Man, this took me some time to resolve - including a long coversation with Gemini, which wasn't able to troubleshoot it.
This is what the issue turned out to be. At some point, our showBusy() function became:
document.body.classList.add("busy");
document.documentElement.inert = true;
I commented out setting inert true an then the cursor appeared. I asked Gemini to expain and got this:
"The inert attribute tells the browser to completely remove that element and all its children from the accessibility tree and ignore all user input. This includes clicks, keyboard focus, and crucially, pointer hover events.
"Because inert tells the browser to pretend the mouse isn't interacting with the document at all, the rendering engine completely aborts calculating CSS cursor rules. It doesn't even attempt to look up your .busy class for the mouse, so it defaults to the system auto cursor."