derogab/coingraph

Coingraph is a real-time graph for cryptocurrencies.

👋 Hello world! I'm Gabriele

• 🎓 I have a Bachelor Degree in Computer Science at UniMiB
• 📚 I'm currently studying for a Master Degree in Computer Science at UniMiB
• 🏢 Sometimes I work as a Web Developer / Head of IT at Madesk
• 👉 My plan is to improve my coding skills more and more...
• ❤️ I love to code in Python, NodeJS
• 📫 How to reach me: derosagabriele at outlook dot it

Some stats

Keep in touch

Website · Twitter · LinkedIn

coingraph's Issues

Re-style Control Center

I think the graphics of the control center can be improved.

Can anybody help me to rearrange the area?

Move ALL config to config.py

Currently only webserver.py uses the config values, getdata.py does not utilize the config. Would take this on myself but have other things on my playe.

Enter bounty contest for cryptocurrency portfolio manager

Y'all might be interested in this: tokenportfolio.eventbrite.com $25k to win and word of the competition has not traveled far.

Replace Apache with a simple Python WebServer

A developer on hacker-news made me notice that coingraph uses too many dependencies that can be replaced with home-made alternatives.

One of these is the web server.
Now I use Apache, but it would be nice to replace it with a python web server.

Remove MySQL to use public APIs

A developer on hacker-news made me notice that coingraph uses too many dependencies that can be replaced with home-made alternatives.

I have already replaced Apache with a webserver with the help of @gmemstr.

Another of these is the MySQL server.
I had in mind replacing the database using only Public APIs.

polling-xhr.js error

polling-xhr.js:268 GET http://localhost:8081/socket.io/?EIO=3&transport=polling&t=NU6-4O_ net::ERR_CONNECTION_REFUSED

Use prepared statements to prevent SQL injections

Right now, PDO's prepare method is called, but incorrectly used. Indeed, instead of creating a prepared statement (with placeholders) and giving user-controlled values as parameters of $pdo->execute, you are directly using them in the query, which make this script vulnerable to SQL injections.

The same thing applies to getdata.py as well, even if we can suppose that these APIs are not going to return any data only to exploit you script :-)