So to start with, I noticed that I couldn't log into my dashboard to monitor and build out my blog a bit more. So I routed it back and noticed that there appeared to be a bit of traffic to the page from a few locations and this was locking out me as a user. I decided to add a few things to toughen up security, One scenario is adding a specific admin email address, meaning the only account that can get access is that email address and even if there is another email that can't get in either. The other thing was I included a 60 second failed attempt blocker after 3 attempts within a 5 minute window. This reduced the amount of combinations a AI could try over the day. The other thing I have done is restrict the admin link to only be accessible by a certain IP address. This means that only one particular machine can actually access it. This works potentially for those that are on a company network and maybe need it configured for just a few people on the internal network to get access to certain pages.
I went down all those paths, but have been thinking why don't I just take the admin view offline and run it locally. Still have the public viewable stuff on the internet but the stuff that can be controlled could just run offline. This would allow for the site to run at another level more securely and would prevent these sorts of issues from occurring in the first place because the front end of the page wouldn't have any trace of the backend controlling it. It's Genius, it allows me to get access while creating a fresh system.
Anyways, this morning it was quite stressful sorting that one out. Thought id been hacked haha.
Updates regarding the Accounting Application: Work is going ahead, Now analysing other options out there where they miss the point and what could be done differently to make it more convenient to use. Thoughtfully going through and seeing where each of the competitors weaker points are and what can be Improved to make this product better than the alternatives. Also making sure the design I use is different, so the software doesn't get caught up in any copy write clauses.
New Tool, NZ Tides application The other day I decided to open up a tool I had started working on last year. A mobile application that you can check what your local tides would be. The App simply loads up tidal information for your area and works to show you tidal information for that area, It works quite simply and is easy to read and use on bright days.
Along With tidal information in this app I thought it would be cool to have access to other information in the same application, General weather, Wind direction, Local knowledge of a beach, etc as the general Idea is this is just an application for those that want to use the beach and maybe where a community of people can get together and organise hangouts within themselves.