Fabliha Bushra

Independent Software Developer

Self Employed • Indépendant

Dec 2012 - Present • 13 yrs 11 mos

Architect and build production Telegram commerce systems end to end: bot layer, backend, database, payments and infrastructure. ARCHITECTURE - Multi-tenant, multi-vendor design: each vendor runs an isolated bot with its own token, catalog, pricing rules and branding, on one shared backend - Webhook-based update handling (PHP/Python) with secret-token validation, idempotent update processing and deduplication by update_id - Normalized MySQL schema with indexed lookups, foreign keys and transactional writes for orders and balances PAYMENTS AND WALLET - Ledger-style wallet: every balance change is an immutable transaction row, so balances are auditable and reconcilable - Automated deposit flow with payment callbacks, signature verification, duplicate-callback protection and race-condition-safe crediting (row locking / atomic updates) - Order flow with atomic balance deduction and rollback on supplier failure SUPPLIER API AND STOCK ENGINE - REST integration with external supplier APIs: authentication, retries with backoff, timeouts and error mapping - Scheduled stock and price sync (cron / worker queue) with change detection and margin rules applied per vendor - Automated order placement and delivery to the buyer, with status polling and reconciliation of failed orders VENDOR TOOLING - Template editor: vendors edit bot messages, menus and inline keyboards without code, rendered from stored templates with variable substitution - Admin and vendor panels: users, orders, deposits, stock, broadcasts and reports - Broadcast engine with rate limiting aligned to Telegram flood limits, queueing and delivery reports AUTOMATION AND SUPPORT - Auto-reply and support bots with state machines for conversation flow, FAQ routing, ticket creation and human handoff - Browser and workflow automation with Playwright (Python) SECURITY - Input validation and parameterized queries (SQL injection prevention) - Token and secret management outside the web root, HTTPS-only webhooks