Hey Hassan ! i've saw your project online , i am a fan of MERN stack web , so i've review your source code , there's a lot of issues , and leak of business logic , and bugs
![Screen Shot 2023-04-25 at 04 59 21](https://user-images.githubusercontent.com/58659995/234163887-c37f919f-05c3-4f11-b8ec-874c91d31110.png)
one of them, in this API endpoint , /api/user/edit-user , to provide the user an ability to update its profile data , in this case , you miss the proper validation of user's ID , i can bypass this and update someone else profile by getting its ID .
there's a lot of issues , i just liked your project , and decide to go along with it .