Database & Security
-
Your replit database lost rows after the Agent ran migrations
Replit Agent can reset your replit database while you asked for a UI tweak. Tables vanish, test users appear, and production data is gone before you notice the…
Read article -
Your lovable api key is sitting in the frontend bundle
Lovable can paste OpenAI, Stripe, and Supabase keys straight into React files. A lovable api key in the bundle is copy-paste public after publish — move secrets to…
Read article -
lovable security fails because you never wrote a policy
Lovable ships auth screens and data tables fast. lovable security still fails when Row Level Security is off and the anon key in your bundle can read every…
Read article -
Lovable supabase saves work in preview but fail on the live URL
Lovable wires Supabase in preview. After publish, saves succeed in the UI but rows never appear, or the live app points at a different project entirely.
Read article -
Your supabase anon key is public — that is not the bug
The anon key sits in your frontend source. Anyone can copy it. Security comes from RLS policies and server routes, not from hiding a key that was never…
Read article -
Your Supabase database is public until supabase rls is on
Preview saves feel private. On the live site, anyone with the anon key can list your tables until you enable row level security and write policies.
Read article