Chart Chic

A live online shop selling digital cross-stitch patterns for a small business. With digital products, delivery is the hard part, because once someone has the file you can't take it back.

It uses Stripe Checkout, with orders fulfilled through Stripe's webhooks, and downloads are protected by links that only work for paid orders. Whether an order is paid is decided by the webhook, not by the customer's browser coming back to the site, because a browser can be closed, refreshed or faked.

There's an admin area for managing products, categories and reviews, and only people who've actually bought a pattern can leave a review, so the ratings mean something.

While building it I found a security hole in a Postgres view. Views don't automatically follow the security rules of the tables underneath them, which is easy to miss unless you've been caught by it before.

I found it before launch because I went looking for it.

I also handled the SEO: structured data, an automatic sitemap, and generated images for when the site is shared on social media.