Pinned Tweet
Day15 - SmartLedger is built around one question: can we trust the financial record?

From payment capture to double-entry accounting, ledger balances, reconciliation, exceptions, audit trails and financial reporting

Every Dollar or naira has a trail. Every mismatch has a signal
23
0
21
211
Day 77
An error response shouldn't reveal how your backend works internally.

Returning stack traces, SQL errors, or database details to clients can expose information attackers could exploit.

Give clients useful error messages.

馃憞
1
0
0
7
Replying to @TheWebGuy_
Keep technical details in server-side logs.

With Spring Boot, centralized exception handling helps maintain consistent responses.
Debug internally.

Respond safely.

#100DaysOfCode #SoftwareEngineering
0
0
1
11
Techie Prince retweeted
While young men dreamt of kneeling before the damsel of their dreams to ask "will you marry me?" In the quietness of my own lonely world, I always wondered, "who will marry me?" Why will any jewel, divinely crafted, choose to fuse her heart and life with mine?

My past was a healing. My future not so certain for nothing was really promised. I had no comeliness for which I was to be desired. The burdens of the Lord had "damaged" me so; kneeling with a ring in my hand was not a luxury I could afford nor a thought worthy to entertain. To this day, I still unsuccessfully labour to unravel the mystery that is your choice to do destiny with me, my jewel.

Alas, you took an irreversible leap of faith into the unknown. Choosing to be my bride even when it did not make sense to. You locked your hands, eyes, and heart with mine and promised to follow wherever I lead. You have lived with me, warred with me, cried with me, and stood by me. My wife, my beloved, my companion, my fellow-missionary, prophet, warrior, and intercessor. The greatest treasure God has given to me after Himself.

Every time I look at you, It is easy to see that you were sculptured different. Nothing; not your beauty or love mirror anything earthly or fallen. In a world where love has been tokenised and intimacy has become transactional, you, my darling, like a typhoon breeze have lavished love on me rocking the very essence of my being and uprooting any doubts locked within crevices of my soul. You make loving and obeying Jesus easy and loving you a divine adventure.

Seventeen years have flown by so quickly. Seems like just yesterday our journey of faith began. At the beginning you chose me, now I choose you everyday. I am permanently locked in, and look forward to forever. Loving you freely and unconditionally, until Jesus comes to take us home.

Happy 17th Anniversary, Babe 鉂わ笍
160
211
3,331
54,690
Day 76
Your API can be secure and still leak sensitive information through its responses.

Imagine requesting a transaction and receiving not only the amount and status, but also internal account details or another user's information.

Return only what the client needs.
馃憞
1
0
0
4
Replying to @TheWebGuy_
Use response DTOs, restrict access, and never expose sensitive fields by default.

What your backend knows isn't always what your API should reveal.

#100DaysOfCoding #SoftwareEngineering
0
0
0
2
Techie Prince retweeted
And this is the blessing of Judah: and he said, Hear, LORD, the voice of Judah, and bring him unto his people:
- Deut. 33:7A

We pray because we know that we are possessors of the blessing of Judah and God will hear us.

It's 1 Day to the Threshing Floor. Join us.

#RCNLagos
0
4
11
351
Techie Prince retweeted
Dear Pilgrim,

There is no spirit life without the ministry of the Holy Spirit.

May I remind you that you do your Christian life tremendous good by building intimacy with the Holy Spirit.

When last did you acknowledge or speak to Him?
3
38
269
3,145
Techie Prince retweeted
What's your weight in the Spirit? Can you speak and terrorize darkness or is darkness having a field day in your life & family because you're lightweight?

In this thought provoking message commands you to be strong in the LORD.

#RCNLagos
#CBS
#Powershot
0
4
27
435
Day75
Knowing a transaction ID shouldn't give you access to the transaction.

Imagine a user changes an API request from /transactions/101 to /transactions/102 and accesses someone else's financial record.

馃憞
1
0
0
4
Replying to @TheWebGuy_
Authentication alone won't prevent this.
Your backend must verify that the requesting user is authorized to access that specific resource.

Every request needs permission, not just a valid token.

#100DaysOfCode
0
0
0
6
Day 74

Never let users decide which database fields they can modify simply by sending extra JSON properties.

Imagine a user updating their profile and adding "role": "ADMIN" to the request.

If your backend blindly maps incoming data to an entity, you could have a 馃憞
1
0
1
6
Replying to @TheWebGuy_
privilege escalation vulnerability.
Use dedicated DTOs and explicitly control which fields clients can modify.

Accept only what the user is authorized to change.

#100DaysOfCoding
0
0
0
4
Day 73

Frontend validation improves user experience.
It doesn't secure your backend.
Anyone can bypass a form and send requests directly to your API.

In a financial application, 馃憞
1
0
0
5
Replying to @TheWebGuy_
validate incoming data on the server before processing it.
Check formats, required fields, boundaries, and business rules.

Never trust input just because your frontend validated it.

#100DaysOfCode #SoftwareEngineering
0
0
2
6
Day 72

CORS errors can be frustrating, but disabling security to make your frontend work isn't the solution.

Cross-Origin Resource Sharing (CORS) controls which origins a browser is allowed to access your 馃憞
1
0
1
17
Replying to @TheWebGuy_
API from.

In Spring Boot, configure trusted origins explicitly instead of allowing every domain.
Convenience shouldn't come at the expense of security.

#100DaysOfCode #AppSecurity
0
0
1
8
Day 71
A valid login doesn't mean every request from a user's browser is trustworthy.

Cross-Site Request Forgery (CSRF) tricks an authenticated browser into sending an unwanted request to an application.

The risk depends on how 馃憞
1
0
2
8
Replying to @TheWebGuy_
authentication works, especially when browsers automatically attach session cookies.
Security isn't just verifying identity. It's ensuring requests are intentional.

#100DaysOfCode #Java #SpringBoot
0
0
2
9
Techie Prince retweeted
Need I say it's not about a fellowship or ministry, though some can be very extreme.
But, almost all fellowships take people's time in school esp if you're involved with leadership.

My advice is to find the balance always.
Wrong! Instead connect them to solid fellowships like DLCF, RCF, and some in the departments.

If your child attend Deeper Life Campus Fellowship in the university, he'll be better for it.
0
2
2
101
God bless your home Papa and Mama 馃檹
Keep burning for the Master 馃挭
A beautiful union. A divine partnership. A testimony of God's faithfulness.

Today, we joyfully celebrate our beloved spiritual parents, Dr. Arome Osayi and Rev. (Mrs.) Dinna Osayi, as they mark another year of love, commitment and walking together in God's purpose.
0
0
1
5