@eafctutorial: FC 26 INSANE SKILL MOVES 🤯 | Next-Level Dribbling & Tricks

eafctutorial
eafctutorial
Open In TikTok:
Region: TR
Monday 29 December 2025 19:06:36 GMT
93940
1004
9
33

Music

Download

Comments

usercr7edits1
S4NTY🐺ROA🐺 :
el otro jugador no estaba jugando ósea es mentira
2026-01-18 02:47:03
0
jay.quite
Jay.Quite :
I tried this but I play against people who play defense
2025-12-30 06:12:02
0
erdemmthee7pugb
7𝙩𝙝𝙚𝙀𝙍𝘿𝙀𝙈 ☪︎ :
first
2025-12-29 19:13:39
0
barca1911293
btww#pahan🇬🇪⚔️ :
1
2025-12-29 19:13:47
0
thessassinoff
TheAssassin_off :
😅😅😅
2026-01-02 02:10:46
0
notification123ui
Dori💷👑 :
😂
2025-12-30 19:28:53
0
user15092471822552
مقتدئ صباح :
😳😳😳
2025-12-29 21:07:00
0
darha.lapeque
Darha.lapeque :
😍
2026-01-07 18:11:02
0
omer.bajrami98
Omer.bajrami99265 :
😂😂😂
2025-12-31 22:45:03
0
To see more videos from user @eafctutorial, please go to the Tikwm homepage.

Other Videos

MISTAKE NO. 10/10 ✶ I got hacked 🤦‍♂️ Okay, here’s the detailed explanation of what happened, why it’s so common, and how to prevent it: It all boils down to one thing: I didn’t realize Supabase RLS only controls which rows a user can update, not which columns inside those rows. Supabase/Postgres does support column-level permissions, but they’re separate from RLS and I hadn’t configured them. You can’t just tell an RLS policy, “Let users edit this row except for this one column.” My policy said users could only access their own account. I glanced at that and thought I was good because no one could edit anyone else’s data. The problem was that I stored each person’s AI usage limit on that same user table. Because users could update their own row, they could also update the usage-limit column. They didn’t need to use my app. Someone could call Supabase directly, raise their limit, and give themselves unlimited AI. Every request costs me money, so they could have run up a $10,000 bill. This is why it’s so easy to miss. “Users can only edit their own data” sounds safe, but that row might also contain limits, credits, subscription tiers, roles, or admin flags that only your backend should control. The best fix is moving backend-only values to a separate table. Users can have read-only access if needed, but only the backend should be able to update it. If you can’t move the data yet, a temporary fix is a database trigger. Before saving an update, it compares the old and new values and rejects the request if a protected field changed. Thankfully, the person who found this reported it instead of abusing it 🙏 After my original post, more than 10 developers told me they had the same vulnerability. If you use Supabase, check every table users can update for anything they should never control. I’m never launching another app without checking both which rows users can access and exactly which fields they can change. This was mistake 10 of 10 from building four apps. Check out the other nine on my page, and follow along for my next series 🤠 #softwaredeveloper #appdevelopment #buildinpublic #supabase #vibecoding
MISTAKE NO. 10/10 ✶ I got hacked 🤦‍♂️ Okay, here’s the detailed explanation of what happened, why it’s so common, and how to prevent it: It all boils down to one thing: I didn’t realize Supabase RLS only controls which rows a user can update, not which columns inside those rows. Supabase/Postgres does support column-level permissions, but they’re separate from RLS and I hadn’t configured them. You can’t just tell an RLS policy, “Let users edit this row except for this one column.” My policy said users could only access their own account. I glanced at that and thought I was good because no one could edit anyone else’s data. The problem was that I stored each person’s AI usage limit on that same user table. Because users could update their own row, they could also update the usage-limit column. They didn’t need to use my app. Someone could call Supabase directly, raise their limit, and give themselves unlimited AI. Every request costs me money, so they could have run up a $10,000 bill. This is why it’s so easy to miss. “Users can only edit their own data” sounds safe, but that row might also contain limits, credits, subscription tiers, roles, or admin flags that only your backend should control. The best fix is moving backend-only values to a separate table. Users can have read-only access if needed, but only the backend should be able to update it. If you can’t move the data yet, a temporary fix is a database trigger. Before saving an update, it compares the old and new values and rejects the request if a protected field changed. Thankfully, the person who found this reported it instead of abusing it 🙏 After my original post, more than 10 developers told me they had the same vulnerability. If you use Supabase, check every table users can update for anything they should never control. I’m never launching another app without checking both which rows users can access and exactly which fields they can change. This was mistake 10 of 10 from building four apps. Check out the other nine on my page, and follow along for my next series 🤠 #softwaredeveloper #appdevelopment #buildinpublic #supabase #vibecoding

About