What I've learned building software for businesses: AI tools, automation, old systems, deployments, security and working with clients abroad. Written by me, with sources where I cite anything.
A plain-English security checklist for business web apps, organised around the OWASP Top 10:2025: access control, configuration, dependencies, injection, logging and secrets.
How I approach old business software: audit first, protect behaviour with tests, upgrade the runtime, then replace pieces one at a time using the strangler fig pattern.
Practical notes on working with clients abroad from Pakistan: handling time zones, writing contracts that prevent arguments, and getting paid. No tax advice.
What I've found works when teaching coding to adult beginners and career-changers: start from something they want, keep loops short, explain why, and use AI as a tutor, not a shortcut.
How I'd wire GitHub Actions to a cPanel host, plus the real story of a CI check that kept reporting failures for four months after a host removed Composer.
How my open-source n8n workflow handles WhatsApp travel enquiries: signature check, structured extraction, templated replies, human handoff, and the gaps I know about.
How I use AI coding tools on client work: where they help, the guardrails I rely on, and the failures I watch for, including plausible code that quietly misses edge cases.
Lessons from building 50+ travel websites and web apps for healthcare, education, real estate, finance and automotive clients: where projects actually go wrong, and it is rarely the code.