44.25 Hours & Counting « 48-Hour Launch

A couple more then I have to clean the kitchen ...

1. Use that valuable h1 tag (and h2) on every page to tell me something (and Google) about that page - something good and rich. Don't waste it on my name - or if you do, I should be allowed to say something about myself. Or there should be something else there. Just an important tag that I'd hate to waste.

2. Your image alt tag for your log needs improvement. Also a text tag line would be a good thing.

3. Set up a custom route and a field in your db where you make a friendly url for all the courses. "/course/2" should be "/course/how-to-use-brainbank". This should also be your page's title "How to Use BrainBank by _your_name_"

Out of curiosity, will the courses be reviewed? What's stopping me from having you send out something bad for me to anyone who signs up?

Ok, the kitchen won't clean itself.

As someone who isn't ever going to give you a permanent email until I'm certain your service is something I would actually use, I recommend you dispense with the upfront registration all together and do what jottit.com does - only make the person register at the very end.

Don't just avoid sending plaintext passwords, also avoid storing them! Storing plaintext passwords makes all of your users vulnerable if someone gets their hands on your database.

Instead, store the salted hash of the password, something like sha1(password + 'this string is a secret!'). When a user tries to log in, compute the hash again, and compare it to the one you stored.