Public Prompt Library

Cloudflare Turnstile CAPTCHA verified on the server

Stop bots on forms without puzzles, and check every token on the server so nobody can skip the widget.

CursorClaude CodeLovable

Curated by Nvoka

0 saves · 16 views

Fix an app that works locally but breaks in production

Find the real difference between your machine and the live site, from env vars to file name case.

Curated by Nvoka

0 saves · 13 views

Security headers and a CSP rolled out in report-only

Add the headers that block common attacks, and test a Content Security Policy before enforcing it.

Curated by Nvoka

0 saves · 13 views

Fix Supabase permission denied and empty query results

Find which row-level security rule blocks the query and fix it without opening your data to everyone.

Claude CodeCursorLovable

Curated by Nvoka

0 saves · 9 views

Find leaked API keys and rotate them safely

Find every secret that reached the browser, the repo or the logs, then rotate each in the right order.

Curated by Nvoka

0 saves · 11 views

Rate limits on sign-in, forms and APIs

Slow down brute force, spam and runaway bills with limits set per action, per user and per IP.

Curated by Nvoka

0 saves · 10 views

JSON-LD structured data across your whole site

Describe your business, pages and content to search engines with structured data that stays accurate.

Curated by Nvoka

0 saves · 10 views

Verify webhook signatures and make handlers idempotent

Accept only genuine webhooks from Stripe and other providers, and process each event exactly once.

Curated by Nvoka

0 saves · 8 views

Fix a sign-in redirect loop that won't let users in

Trace why sign-in bounces between pages forever, from cookies to callback URLs, and fix the real cause.

Curated by Nvoka

0 saves · 9 views

Harden sign-in: sessions, passwords and two-step

Tighten an existing sign-in with safer sessions, better password rules, 2FA and no account leaks.

Claude CodeCursorLovable

Curated by Nvoka

0 saves · 6 views

Fix a Stripe webhook that never arrives or keeps failing

Find why paid orders aren't recorded, from endpoint to signature, without skipping verification.

Curated by Nvoka

0 saves · 8 views

Robots.txt, sitemap.xml and llms.txt set up right

Tell search engines and AI crawlers what to read, and generate a sitemap that stays accurate.

Curated by Nvoka

0 saves · 7 views

Fix website emails that never arrive or land in spam

Trace sign-up and contact emails from your code to the inbox, then fix sending, SPF, DKIM and DMARC.

Curated by Nvoka

0 saves · 7 views

Claude CodeCursorGitHub Copilot

Check an AI tool's changes before you accept them

Read an AI-made diff for scope creep, deleted logic, weakened tests and quiet security changes.

Curated by Nvoka

0 saves · 9 views

Design tokens from your CSS, replacing hard-coded values

Inventory every hard-coded color, size and shadow, merge duplicates and swap in named tokens.

Curated by Nvoka

0 saves · 7 views

Schema validation on every server endpoint

Validate every request on the server with one schema library, so bad or extra data never gets in.

Curated by Nvoka

0 saves · 8 views

Lock in current behavior with tests before you change it

Write tests that capture how the code behaves today, so any change that breaks it shows up at once.

Curated by Nvoka

0 saves · 8 views

Receipt, reset and welcome emails for every inbox

Build receipt, password reset and welcome emails that render well in Gmail, Outlook and dark mode.

Curated by Nvoka

0 saves · 7 views

SPF, DKIM and DMARC so your email gets delivered

Set up your domain's email records so site emails land in inboxes and nobody can spoof you.

Curated by Nvoka

0 saves · 8 views

Fix CORS errors without opening your API to everyone

Read the real CORS error, find which header or request is wrong, and allow only the origins you trust.

Curated by Nvoka

0 saves · 6 views

Cut the gratuitous animation from your site

Audit every animation, keep the ones that explain a change, and cut the rest for a faster site.

Curated by Nvoka

0 saves · 9 views

Lock down your admin area with server checks and logs

Check admin roles on the server for every action, require two-step sign-in, and log what changes.

Claude CodeCursorLovable

Curated by Nvoka

0 saves · 8 views

Fix TypeScript errors that fail your build, properly

Clear build-breaking type errors by fixing the real mismatch, not with ts-ignore, any or skipped checks.

Curated by Nvoka

0 saves · 9 views

301 redirect map for a redesign or platform move

Keep your search traffic and links by mapping every old URL to its best new home before launch.