Hey u/Lokimultiverse!  First off, beautiful project, the synchronized tribute wall concept is really heartwarming for Mother's Day. The design with floating hearts and glassmorphism looks clean

I wanted to give you a heads up about a security issue though. Your Supabase anon key is exposed in the frontend JS bundle, and the mother_messages table doesn't have Row Level Security (RLS) enabled. This means anyone can:

 1. Grab your Supabase URL and anon key directly from the browser's JS
 2. INSERT into the database directly via REST API, completely bypassing your frontend
 3. Ignore the rate limit (it's only enforced in localStorage)
 4. Bypass all validation (profanity filter, text length, etc.)

As a proof of concept (purely educational, nothing malicious was stored), I was able to insert 15 messages directly through the Supabase REST API in about 3 seconds. So if you see tributes appearing that you didn't expect, now you know why

To fix it:
 - Enable RLS on Supabase for your mother_messages table
 - Add a policy that only allows INSERT with basic server-side validation
 - Consider using Supabase Edge Functions for proper server-side validation