This is my developer blog. For the more formal business website, please visit Dayat Technologies. For membership management software visit ManageMemberships
When I started building this SaaS in September, I didn’t even want to launch a SaaS. I was working with a local client who had a tight budget and was using a mess of disconnected services that refused to talk to each other. None of them offered a usable API. I realized the only way to get them what they needed was to build something myself. That was the spark. Writing Code Was Less Than 40% of...
Who’s running your app — your server, your client, or a silent third party you forgot you even wired in? As I’ve been revamping the API layer for ManageMemberships, I’ve started seeing how layered and political “state” really is. You’ve got tokens, hashes, cookies, headers, and sometimes ghosts from past refactors — all arguing over who gets to say what’s true. This post breaks down some of...
Yesterday I had one of those moments that every developer dreads. A client using ManageMemberships said a customer couldn’t sign up through the form. I checked the logs—nothing weird. I signed up myself on my phone using a real card—worked perfectly. The client followed up, saying it still wasn’t working. The member got an error message that said “contact info updated.” That exact...
“Vibe coding” is becoming the default for a lot of developers — and for good reason. When the right tools are in place, you can hit the ground running and move fast. Frameworks like Laravel and Filament paired with AI tools like GitHub Copilot let you focus on building features instead of boilerplate. Code almost writes itself. Development accelerates. And surprisingly often, maintainability...
I was going to give this a different name but that would violate the terms of service of the inspiration of this post. IYKYK. This weekend I was taken deep into the darkness that is serialization attacks, gadgets, and rce via iconv. This was part of a puzzle of sorts. It boiled down to a challenge to try to exploit the following: <?php $data = file_get_contents($_POST['file']); if (...
I’ve been working on adding access control functionality to ManageMemberships. On its surface, it seems like a simple problem. For the first iteration I was wanting to use bluetooth (per the client’s request) to communicate with an esp32 which would then check authentication and allow some sort of electronic lock to disengage. The ESP32 is fantastic and supports bluetooth and wifi out of the...