PHP2Shell: how to fix the critical PHP flaws (CVE-2026-109618 & 109619)
Two remote-code-execution bugs hit every supported PHP branch. What they are, how to check if you're exposed, and exactly how to patch.
Read articleOpen to work · Remote & Hybrid
Software engineer based in Lalitpur, Nepal. I work across Django, FastAPI and Next.js, from the database schema to the chatbot your customers talk to, and I care about the details that keep it fast.
Services
From frontend and backend to AI integration, automation and data, plus 1:1 mentoring for people starting out in IT.
Full-stack web apps and business websites: fast, responsive and easy to manage. Next.js and React on the front, Django or FastAPI behind it.
Add AI where it pays off: RAG chatbots that answer from your documents, smart search, recommendations and LLM-powered workflows inside your existing product.
Secure REST APIs, clean data models and performance tuning that keeps pages fast as traffic grows.
Scripts and scheduled jobs that take repetitive work off your team: reports, syncs between tools, spreadsheet and email flows.
Reliable crawlers for prices, news and product data, plus Google Merchant Center feeds that refresh themselves.
Personal sessions for students and junior developers: picking a path, a portfolio that gets replies, and interview practice.
Book a sessionSelected work
Every stack listed is what the project actually uses. Open a case study for the details.
About me
I'm a software engineer who enjoys the unglamorous parts of building software: the slow query nobody noticed, the edge case in a payment flow, the README that lets the next person get started in five minutes.
Over the last 2+ years I've built Django and FastAPI backends, Next.js dashboards, Scrapy crawlers and RAG chatbots, for an e-commerce company, a fellowship and an internship, and for my own products. At Honest Forwarder, faster APIs and automated product feeds helped lift sales by 32%.
Right now I'm most excited about practical AI: assistants grounded in real documents, and recommendations that actually help people find the right thing.
Toolkit
Experience
Sep 2025 – Present Current
Honest Forwarder Pvt. Ltd. · Full-time
select_related / prefetch_related.Jun – Aug 2025
Cloco Nepal Inc Pvt. Ltd. · Fellowship
Nov 2024 – Feb 2025
Raijin Tech Pvt. Ltd. · Internship
2021 – 2025
Patan Multiple Campus, Tribhuvan University
Blog
Plain-English write-ups on security, backend and AI.
Two remote-code-execution bugs hit every supported PHP branch. What they are, how to check if you're exposed, and exactly how to patch.
Read articleWhy chatbots make things up, how retrieval fixes it, and a small Django + pgvector example you can build on.
Read articleContact
Tell me what you're building, what's slowing you down, or where you want your career to go. I reply within a day.