Daniel Ioni

Posted on Jul 16

I built a Monero payment platform with Admin Panel, WebSocket, and advanced security

#react #node #webdev #android

🚀 I built a Monero payment platform with Admin Panel, WebSocket, and advanced security

MyZubster is a full-stack platform for managing orders and cryptocurrency payments (Monero/XMR). It's a complete application with:

✅ Modern React frontend with responsive UI
✅ Secure Node.js/Express backend
✅ Monero (testnet) integration for real payments
✅ Full Admin Panel with filters, search, and pagination
✅ WebSocket for real-time notifications
✅ VPS with Tor deployment preparation (onion site)

🎯 Why I built MyZubster

I wanted to build a platform that allows users to:

Create orders quickly and easily
Pay in Monero with unique addresses per order
Monitor payments in real-time (no refresh needed)
Manage everything through a complete admin panel

The goal was also to experiment with:

Monero RPC integration
WebSocket for real-time communication
Advanced security (XSS, CSRF, Rate Limiting, Helmet)
Admin panel for data management

🛠️ Tech Stack

Area	Technologies
Frontend	React 18, Axios, React Toastify, QRCode.react, Socket.IO Client
Backend	Node.js, Express, JWT, Bcrypt, Socket.IO, Mongoose
Database	MongoDB (Atlas Cloud)
Authentication	JWT with Refresh Token rotation and revocation
Payments	Monero (testnet) + Mock for development
WebSocket	Socket.IO for real-time notifications
Admin Panel	Dashboard, filters, search, pagination, CSV export
Security	XSS, CSRF, Rate Limiting, Helmet, CORS, JWT Refresh

✨ What's new / What I recently implemented

🛡️ Complete Admin Panel

Dashboard with statistics: total orders, paid, pending, revenue, users, conversion rate
Advanced filters: by status (pending, paid, processing, shipped, delivered, cancelled)
Search: by order number and user email
Pagination: 10 orders per page
Order detail (popup): view all order details with one click
User management: view, search, and promote users to admin
CSV export: download order reports

🔒 Security Implemented

XSS Protection: input sanitization on all user inputs
CSRF Protection: tokens for POST/PUT/DELETE requests
Rate Limiting: 10 attempts/15 minutes on authentication
Helmet: HTTP security headers
JWT Refresh Token: with rotation and revocation
CORS: properly configured for production

💰 Monero Integration

Wallet RPC: connection to monero-wallet-rpc
Subaddress generation: unique addresses per order
Automatic monitoring: 10 confirmations (~20 minutes)
Automatic fee: 2% deducted
Net transfer: 98% to main wallet

📡 WebSocket

Real-time notifications: payment:confirmed and order:updated events
Automatic reconnection: with queue management
Authentication: secure WebSocket connections

📸 Screenshots

Screen	Description
	Login / Registration
	User dashboard with orders
	Admin Panel with stats and filters
	Payment modal with Monero QR Code
	Order detail popup

🔧 How the Monero payment flow works


mermaid
sequenceDiagram
    participant User
    participant Frontend
    participant Backend
    participant MoneroWallet

    User->>Frontend: Create order
    Frontend->>Backend: POST /orders
    Backend->>MoneroWallet: create_address()
    MoneroWallet-->>Backend: Subaddress
    Backend-->>Frontend: Order + Subaddress
    Frontend-->>User: Show QR Code and address

    User->>MoneroWallet: Send XMR
    MoneroWallet-->>Backend: Transaction detected
    Backend->>Backend: Monitor 10 confirmations
    Backend-->>Frontend: WebSocket: payment:confirmed
    Frontend-->>User: ✅ Order paid!

🧅 Roadmap: Deploy on VPS with Tor (I need help!)

The next step is to deploy the project on a VPS with Tor to have:

    🌐 Public website with SSL (normal domain)

    🧅 Onion site for anonymous and private access

    📱 Onion advertising site for marketing

🔴 Where I need help

    VPS setup: choosing the provider, initial configuration

    Tor: hidden service configuration and Nginx

    Automated deployment: scripts to update the site without downtime

    Marketing: how to effectively promote an onion site

If you have experience with VPS, Tor, or deploying Node.js apps, any advice is welcome! 🙏
📂 GitHub Repository

👉 github.com/DanielIoni-creator/MyZubsterAPP
⚠️ Disclaimer

MyZubster is a technological platform designed exclusively for legitimate orders and cryptocurrency payments. The platform is provided "as is" and users assume all responsibility for its use. I am not liable for misuse, illegal transactions, or any activity contrary to the law.
🙏 Acknowledgments

Thanks to the Monero, React, and Node.js communities for the libraries and support.
💬 Discussion

Do you have experience with VPS and Tor deployment?
Any advice on how to promote an onion site?

Drop a comment below! 👇

#React #NodeJS #Monero #Cryptocurrency #WebSocket #AdminPanel #VPS #Tor #OnionSite #DevCommunity
text


---

## 🏷️ TAG SUGGERITI PER DEV.TO

| Tag | Perché |
| :--- | :--- |
| `#react` | Frontend principale |
| `#nodejs` | Backend principale |
| `#monero` | Integrazione pagamenti criptovaluta |
| `#cybersecurity` | Sicurezza implementata (XSS, CSRF, ecc.) |
| `#webdevelopment` | Progetto full-stack completo |
| `#opensource` | Repository pubblico su GitHub |
| `#cryptocurrency` | Pagamenti in Monero |
| `#websocket` | Notifiche real-time |
| `#devcommunity` | Richiesta di aiuto alla community |

---

## 📸 SUGGERIMENTI PER GLI SCREENSHOT

1. **Login page** – `http://localhost:3000`
2. **User Dashboard** – con ordini visibili
3. **Admin Panel** – con statistiche e filtri
4. **Payment Modal** – con QR Code Monero
5. **Order Details popup** – con dettagli ordine
6. **Footer** – con il disclaimer

DEV Community