2026.03.02E·80Technical SEO for Developers: Building Something Nobody Visits Is Pointless
I built a service and nobody came. How I implemented technical SEO in Next.js to drive organic traffic without a marketing budget.
SEONext.jsTechnical SEO
→2025.08.19Y·07I Hacked My First Website (OWASP Top 10 Deep Dive)
I share how I hacked my friend's website with a single line of SQL Injection in high school. I explain the OWASP Top 10 vulnerabilities every developer must know allowing you to 'think like a hacker'. I focus on Injection, Broken Access Control (IDOR), Cryptographic Failures, and Security Misconfiguration.
SecurityOWASPHacking
→2025.07.14Y·05The Culprit Who Stole My Cookies Was a Comment (XSS Defense Guide)
My admin account was hijacked because of a single comment on the board. I dive deep into the 3 types of XSS (Stored, Reflected, DOM) and concrete defense strategies in React/Next.js environments, including HTML Escaping, CSP, and Cookie Security.
SecurityXSSWeb Development
→2025.07.12Y·04I Spent 3 Days Implementing 'Login with Google' (OAuth 2.0 Deep Dive)
I thought adding a 'Login with Google' button would be easy. Instead, I faced Redirect URI errors, State parameters, and HTTPS issues. I share the 4-step 'dance' of OAuth 2.0, practical solutions with NextAuth.js, and how to handle mobile deep linking.
SecurityOAuthAuthentication
→2025.05.25U·01Why Client Components Cannot be Async in Next.js: Understanding SC vs CC
Fix the 'async/await is not yet supported in Client Components' error in Next.js once and for all. This comprehensive guide explores the architectural differences between Server Components and Client Components, explains why React Hooks conflict with async rendering, and provides three robust strategies for data fetching: passing data from Server Components, using useEffect, and leveraging libraries like TanStack Query.
Next.jsReactFrontend
→2025.05.18U·01Why is My API Key undefined? (The Danger of Leaking Secrets in Next.js)
My API key worked fine locally but showed `undefined` in the browser console. I share my 3-hour debugging struggle caused by misunderstanding Next.js's 'Server-Client Boundary' and how I almost leaked my secret keys.
Next.jsEnvironment VariablesSecurity
→