I'm a personal trainer working on a web app to manage client training programs. Although I have a good grasp of programming, I don't have a formal computer science background, and I've been away from coding for a while. Most of the coding is being done by AI (specifically Claude), while I handle the architecture, decisions, debugging, and integration. The app's idea is simple: I want to create and manage training plans where my clients can log in to track their workouts. My main concerns are whether it's realistic to create a fully operational coach-client app relying heavily on AI-generated code, and what security measures I should prioritize, especially since it will handle user accounts and possibly sensitive health information in the future. I'm already looking into proper authentication methods, HTTPS, and input validation, but I feel like there's more I need to know. Any advice on whether my goals are achievable and what security essentials I shouldn't skip would be greatly appreciated!
3 Answers
I’d say it’s *maybe doable*, but you need to be extra cautious. Make sure you're in control of access to mitigate security risks, and be prepared for things to break at times since AI might not handle everything perfectly. Also, you'll want to carefully audit the AI's code because, unless you look for security flaws, you might not catch them. For handling health info, keep in mind you might have to comply with regulations like HIPAA, which could complicate things.
It's definitely doable, but keep the scope manageable. Think of AI as your junior developer; it can cover a lot but don’t rely on it entirely. The risk is creating a messy code base that's hard to maintain. For security, focus on basics like using a reliable auth provider and HTTPS, ensuring strong access controls, and properly validating all inputs. If you're dealing with health data, prioritize privacy and security from the outset. Build it out, but don’t forget to get a knowledgeable peer to review it before you let others use it.
Yes, it's a viable project! The key is to start simple; consider creating a minimal working version first—just basic functionality with back-end, front-end, and auth, then iterate from there. As for security, make sure you're encrypting sensitive data and implementing rate limiting to protect against attacks. Understanding how the AI's code works can help you spot and address any issues, especially with sensitive data.
Related Questions
How To: Running Codex CLI on Windows with Azure OpenAI
Set Wordpress Featured Image Using Javascript
How To Fix PHP Random Being The Same
Why no WebP Support with Wordpress
Replace Wordpress Cron With Linux Cron
Customize Yoast Canonical URL Programmatically