ICYMI: Shopify's myshopify.com gap exposes merchants to unstoppable bot floods: A Shopify merchant traced 500+ fake carts per hour to a subdomain Shopify controls, exposing a structural gap that custom WAF rules and Cloudflare cannot close. https://ppc.land/shopifys-myshopify-com-gap-exposes-merchants-to-unstoppable-bot-floods/ #Shopify #Ecommerce #BotProtection #CyberSecurity #Cloudflare

Built a personal mindfulness check-in tool, three questions, four times a day: how's your breath, what's your mental state, one small shift you can make.

Runs on Cloudflare Workers + D1. Single HTML file served inline from the worker, localStorage for offline-first saves, D1 for stats and streaks.

Just added a few things:
- "Now" slot for anytime check-ins outside the four fixed windows
- Shareable read-only stats link (opt-in, no feelings exposed, just patterns)
- Daily rotating tip from Verbal Judo by George Thompson
- Weekly practice screen ? one chapter snippet + one exercise per week, rotates by ISO week number

Public stats: 🔗 mindful.mrdinesh.workers.dev/public=1

The sharpest bug I hit: inside a JS template literal, \' collapses to ' your own app's string delimiters become invalid tokens in the browser. Fixed with
data-* attributes instead of inline string args.

Code + writeup: mrdee.in

#javascript #cloudflare #mindfulness #vibecoding