r/Base44

This is a first.

We've run Vibe Sprints on Discord for a while now. But this one is Reddit only.

The brief is simple: build an app that does exactly one thing, and does it better than anything else out there. No feature creep. No bloat. One problem, solved properly.

The best ideas are usually the most focused ones. Prove it.

HOW TO ENTER

Reply to this thread using the format below. Entries that don't follow the format won't be considered.

App Name:

What it does:

The one problem it solves:

Link:

Screenshot or short demo: (attachment)

HOW WINNERS ARE DECIDED

Upvotes matter. Community backing counts. But the Base44 Team has final say, so a well-built app with a clear brief will always beat a popular one that misses the point.

PRIZES

🥇 1st — 150 Credits

🥈 2nd — 100 Credits

🥉 3rd — 50 Credits

TIMELINE

Submissions open: Today, Friday 22 May NOW

Submissions close: Tuesday 26 May at 6pm BST

Winners announced: Wednesday 27 May 12pm BST

EVERY SINGLE TIME I OPEN YOUTUBE, A SMALL VIDEO, ANY SORT OF MEDIA ON YOUTUBE, Fucking Base44 ads, “I JUSt BuilT a buSgeteing ApP in Bahaes 44!!!!”. ALL I SEE IN ADS IS BASE44 BASE44 BASE44 IT’S BEEN FUCKING 5 MONTHS AND THIS AD IS NOT GOING AWAY.

I've been a software engineering manager for 11+ years. Over the past few months, I started reviewing vibe-coded apps out of curiosity, and the same issues keep showing up regardless of the stack.

Here's what I found in every single one:

1. Auth tokens committed to the repo

Environment variables with Supabase keys, OpenAI keys, or Stripe secrets sitting in .env files that got pushed. One leaked key and you're looking at your entire database exposed or a surprise $3,000 API bill.

2. RLS misconfigured on at least one table

Supabase Row Level Security is turned on, but at least one table has a policy that's too broad or missing entirely. The app works fine until someone figures out they can read another user's data.

3. No rate limiting on any endpoint

Every API route is wide open. A single script running in a loop can take the whole thing down or run up your cloud bill in minutes.

4. No error handling past the happy path

The AI writes code that works when everything goes right. When a third-party API times out or a database write fails, there's nothing catching it. It just fails silently.

5. N+1 queries and wildly inefficient database access

The app works fine with 10 users, then completely falls over at 1,000. AI-generated code often fetches related data inside loops, makes repeated database calls for every render, or skips indexing entirely. You end up with pages making hundreds of unnecessary queries and response times exploding under load.

6. No authorization checks beyond login

A lot of vibe-coded apps correctly check “is the user logged in?” but never check “should this user be allowed to do this action?” Users can often modify IDs in requests and access admin functions, other users’ records, or paid features because ownership and role checks were never implemented properly.

None of these are hard to fix once you know they're there. The problem is they're invisible until something breaks in front of your users. Auditing your code on QodeShark (My team and I built it) or Qodo before launching might be a good idea.

Happy to answer questions if any of this is useful.

I'm just writing to vent, haha. I've been creating a project that I consider very profitable, since these platforms already exist that are expensive and in demand. And I created something that's very functional, and seeing that I'm not getting funding depresses me 😞 But I'll keep going; that's just how EntrepreneurCode is, haha.

Hello everyone,

I’ve consumed all my credits, but I still need to make some changes to my app.

What should I do in this case?

Is there any workaround, like editing the code manually, making changes outside Base44, or using another method without credits?

Would appreciate any advice from people who’ve dealt with this before.

I am struggling to set up and app that has multiple clients each with their own set of users and data. The biggest issue is the inviting of new users. I’ve set up a ClientUsers table that supposedly syncs with the built-in Users table but it’s not working. The user is invited. The user is provided a sign up link with token. But when the user goes to sign up the User record is updated from pending but it won’t store the client id and it will not update the ClientUser record status nor add the user id. I’ve gone rounds of this.

Anyone successfully overcome this? Any approach that seems to work best? Should I look at this differently?

By the way, the reason for the ClientUser table is because I want to be open to the possibility that one user could belong to multiple Client teams over time.

Hi, so I have built a app but heavily concerned about the integration credits and it relies on alot of api's. Very new to app building and learning as I go it from brief research it appears I might have screwed myself by using base44. I dont see competitors doing a similar thing so considering attempting to move my app elsewhere. Does anyone have any suggestions or anything I should know? My app is not public yet but in testing it appears I might hit integretion credits cap fast when released and I just want to be prepared for this possibility.

Thanks!!

I pushed a change last month. Looked fine to me. Turned out auth was silently broken for new signups I found out three days later when someone mentioned it.
No tests. No alerts. Just me clicking through the happy path and missing it.
I've talked to a few other builders using Lovable and Cursor and heard the same story: fixed one thing, broke another, found out too late.
Curious how others handle this. Do you have any kind of safety net, or is it mostly push and pray?

i know base44 defaults to automatic, but should I manually set a specific llm for better responses? i have a hunch it defaults to cheapest....

Public and private page

I can't seem to make my base44-encoded app private while making the links it generates public (it's a page builder) using any prompt or method.

Estoy creando un punto de venta para restaurantes en base44 pero nose si realmente vaya a funcionar y quisiera saber si alguien ha creado y lucrado algún tipo de punto de venta en base44 o si alguien lo creo en base44 y luego migro de base44

I have a PRO account in base44.

I have been locked out of our own workspace for 11 days and counting. SSO has been enabled in the workspace (we don’t know how, probably my mistake), and I cannot login into base44 since then.

Support has been absolutely terrible, outrageous and disappointing. They seem to simply not understand the problem at all. The solution is to disable SSO in the workspace, justa that. Boy the way, support is only available from inside Base44, so I had to use a different account to contact them, which made everything even worse.

11 days. Really, the WORST support I have ever seen.

As it seems, base44 is not for me. Probably it is not for you either if you need to have access your account.

Hiii,

Has anyone used base44 to make a blogging website? I have created an app. Now I wish to write blogs for organic research. Still pondering upon the options we have. Vibe coding made me lazy to go back to wordpress or any other no code tools to design myself!

Regards,

I’m looking for some help ASAP getting my app market ready. I have a few functions that I need help with and need a dev/architect to help. If you have experience and are interested, please DM w the following:

• pay rate
• experience (with track record)
• availability

Wondering if it’s possible to test my app on my phone before looking to publish. I want to see what the experience is like before putting it out into the world.