☠️ here is why your vibe coded project is not safe

when you set db rules, you think you are safe ☣️

watch how i exploit a "safe" supabase db by inserting millions of rows

see the thread below to learn how to protect yours

(don't just bookmark it, add them to the rules file) RLS rules are go to approach by AI models...

but they shouldn't be. you must do these instead:

1) enable RLS but don't put any rules this will close your database to the outside of the world. after this only service role key can reach your db

✍️ over 80% of the vibe coded apps have critical security vulnerabilities

here is the checklist to make sure your app doesn't have this:

(don't jut bookmark this, copy them into your .cursorrules file) don't talk to the database directly

if you use tools like supabase or firebase, the ai often connects your frontend straight to the database. this is like leaving your front door open. instead, ask the ai to build a "middleware" or backend api that handles the data for you.