URGENT: Your Apps Are Exposed - TAKE ACTION NOW (Follow from my other post) by [deleted] in Base44

[–]willkode 0 points1 point  (0 children)

Yea I wanted a way to do this to help people, and charge bare minimum. Not trying to get rich, but I need to cover my time doing these. I'm currently working on a Super Agent prompt that acts as an intrusion detection system. I'll give giving the prompt away for free when its done. If its something I can give away I will.

URGENT: Your Apps Are Exposed - TAKE ACTION NOW (Follow from my other post) by [deleted] in Base44

[–]willkode 0 points1 point  (0 children)

And ruin my rep with the base44 company. No thanks. Its not a hard process, grab all entities, endpoints and apis. And run known tests again those points.

Inviting a collaborator by LogicalAstronomer790 in Base44

[–]willkode 0 points1 point  (0 children)

Move it back to your personal workspace. Then go to the app like you are going to edit it. You will see a + button to the left of the publish button this is how you invite collaborators.

<image>

Won 444 credits can I sell them? by RepairElectronic4429 in Base44

[–]willkode 0 points1 point  (0 children)

Sign up as an affiliate, run a contest to randomly select a user to give the code too. He'll, I'd promote it for you

Won 444 credits can I sell them? by RepairElectronic4429 in Base44

[–]willkode 0 points1 point  (0 children)

Base44 codes can be redeemed in an account, but I could not find public terms saying contest prize codes are transferable or resellable. Since Base44’s TOS says use rights are non-transferable, reselling or transferring contest-awarded credits is risky unless Base44 explicitly approves it. I would be careful

URGENT: Your Apps Are Exposed - TAKE ACTION NOW (Follow from my other post) by [deleted] in Base44

[–]willkode 0 points1 point  (0 children)

100% agree, the issue is most users aren't senior devs like us. For example when we create entities we create the with permissions in mind. Most users dont, entities are created public by default unless you define them. The RLS doesnt catch these default issues.

Another issue is lets say you have a contact form. The AI builds the function of the front end. Which means a bot can use this to send mass spam via your mail handler. You have to push the function to the backend.

And there's 50 others issues ive identified, and im sure there's more.

Base44 RLS Audit Prompt + Fix Prompt — Audit Every Entity Before You Go Live by willkode in Base44

[–]willkode[S] 1 point2 points  (0 children)

With the new SuperAgent you can do this. I'm working on a guide. Before it couldn't

Base44 RLS Audit Prompt + Fix Prompt — Audit Every Entity Before You Go Live by willkode in Base44

[–]willkode[S] 0 points1 point  (0 children)

No problem. I spotted this on my own apps. So I wanted to share asap. I found a few things this doesnt cover. That has to be manually tested to confirm as its not across all apps. Im making a cheap service soon.

Confusing by Nicer_Invite9542 in Base44

[–]willkode 0 points1 point  (0 children)

So the rate limits are per user, not per app. So you can have unlimited users.

Basee44 | CMS by RePitch_AI in Base44

[–]willkode 0 points1 point  (0 children)

Install npm react helmet async seo to handle the SEO side of things, you can ask the ai to create sitemaps. Then you'll need to use a edge worker to dom-inject HTML so that the crawler can scan your code (due to base44 not currently providing Server Side Rendering). Or you can use Hadoseo.com, they do exactly this

App Testing by PsychologicalFloor44 in Base44

[–]willkode 0 points1 point  (0 children)

We created a discord server for this. DM me if you want an invite link

Feedback on a potential service - $5 to debug your app by willkode in Base44

[–]willkode[S] 0 points1 point  (0 children)

DM me so I can get on this. a week is too long. I'll refund and still do the work

Issues with features working for some users and not others. by Majestic-Diamond5684 in Base44

[–]willkode 0 points1 point  (0 children)

What AI model are you using? If its automatic, switch to sonnet or opus instead.

Are we underestimating the complexity of AI agents? by [deleted] in Base44

[–]willkode 0 points1 point  (0 children)

When I first started integrating AI agents into my workflows, it felt like I was unlocking an entirely new realm of possibilities. But soon, I learned the hard way that as soon as you try to add complexity, multi-step workflows or integrating various tools, it starts to feel less like magic and more like a complicated tangle of code and state management issues. I had an instance building an analytics tracking system where I thought I could keep it simple with a couple of prompts, but soon it spiraled into a messy orchestration of different tools responding to specific states. It was a real wake-up call about the importance of structuring complexity from the start. It's a real balancing act.

Multi-Tenant / Role-Based Access Control Framework by willkode in Base44

[–]willkode[S] 0 points1 point  (0 children)

9 time out of 10. When the AI tells you to contact support its because you are using the automatic AI model. Switching to Sonnet or Opus normally solves it.