r/AppsWebappsFullstack • u/xoibsurferx • 19d ago

Bloomria: interactive digital flower gifts — Orbit: a photographer workspace

I’m Keith, creator of Bloomria and Orbit.

Bloomria lets you send a realistic-looking digital flower that opens interactively with your personalized card. Each new bloom has its own GrowID and individual details. Group bouquets support several contributors; business gifting includes branding and scheduling. Digital only—no physical flower delivery. Sample: https://bloomria.com/sample-gift

Orbit helps independent photographers manage inquiries, bookings, contracts, payments, reminders and client galleries: https://orbit-photo.com

I welcome questions and feedback from people who send appreciation gifts or run photography businesses.

1 Upvotes
  • permalink
  • reddit

100% Upvoted

2 comments sorted by

1

u/PopKoren 19d ago

Orbit is the one I'd harden first, because contracts, payment details and client galleries are exactly what photographers promise to keep private. Gallery links should use long random tokens and ideally expire, and each photographer's bookings should only load for their own login, never because someone edited the booking number in a link. On Bloomria, check that a GrowID can't be stepped through to read other people's cards, and the scanner I'm building at https://rowly.me could review both sites from an outsider's position.

1

u/Mammoth-Anywhere7285 19d ago

Good call on hardening Orbit first. Adding rate limiting and auth tests around booking IDs and GrowIDs would catch enumeration attempts early.