Tagged #security

weeklySep 18, 2026

A document link that still works a week later

Cancellation requests arrive in a staff chat with the customer's signed paperwork attached — except the link was usually dead by the time anyone clicked it. I replaced it with one that never expires and still can't be guessed.

#PHP#Yii2#Telegram#security#S3

dailyAug 10, 2026

Teaching a face-scan login to ask: "Is this still your number?"

Our insurance site logs people in with a face scan through MyID, Uzbekistan's national ID system. A face proves who you are - but not how to reach you. I rebuilt the login so that every sign-in also checks whether the phone number on the account is still real.

#Nuxt#PHP#auth#OTP#security