Discount Hunters
Turkey's most up-to-date discount codes and campaigns platform. Modern full-stack web application built with Next.js 16 and Express.js.
About the Project
Discount Hunters is a modern web application where users can find thousands of discount codes and campaigns on a single platform. It offers a full-featured full-stack solution with a frontend developed with Next.js 14 App Router, Express.js RESTful API backend, and PostgreSQL database. The project is built on a production-ready architecture with SEO optimization, security measures, and performance improvements.
Challenges
The main challenges of the project included creating a secure authentication system, providing protection against CSRF and XSS attacks, environment-based configuration management, and seamless transition between production-development environments. Additionally, deploying the frontend on Vercel and the backend on VPS on different platforms required detailed configuration for CORS, CSP, and cookie management.
Solutions
A balance between server-side rendering and client-side interactivity was achieved with Next.js 14's App Router structure. Secure session management with JWT-based authentication system, password hashing with bcrypt, and protection against brute force attacks with rate limiting were added. Type-safe database operations were performed with Prisma ORM. Both development and production environments were isolated with Docker. With environment-based CSP configuration, localhost was allowed in development, while only production URLs were permitted in production. Global state management and automatic token refresh mechanism were implemented with Redux Toolkit.
Results
The platform was successfully deployed to production and is running stably. Visibility in search engines was increased through SEO optimizations. Content management was facilitated with the admin panel. Protection against OWASP Top 10 security vulnerabilities was provided with security measures. Easy deployment and scalability were achieved with Docker containerization. API endpoints were protected against spam and abuse with rate limiting. Excellent user experience was provided on all devices with responsive design.
Screenshots

Homepage
Modern ve kullanıcı dostu ana sayfa tasarımı

Discount Codes
Kategorize edilmiş indirim kodları listesi

Admin Panel
Kapsamlı admin yönetim paneli

Blog
SEO-optimize edilmiş blog sayfası