QRcdr

Vibe coding is great for demos. But ‘it works’ is just the beginning.

In my last post, I talked about turning a decade-old PHP QR code generator into a WordPress SaaS plugin. One detail I glossed over: the QR engine itself was already solid, tested, and selling for years on CodeCanyon. Wrapping it into a proper WordPress plugin with native billing and a real user infrastructure still took about a year.

But the plugin was only part of it.

Building while the ground was shifting

While I was developing QRcdr PRO, something else was happening in the background: the marketplace I’d relied on for over a decade was quietly changing shape. Envato — which had been the primary distribution channel for the original PHP script — was deprioritizing CodeCanyon in favor of its subscription product, traffic was declining, and discovery was getting harder.

I wrote about this in detail in a separate post, but the short version is: the solid customer base that CodeCanyon had provided for years was no longer something I could count on.

That meant the year wasn’t just about building the plugin. It was also about building the infrastructure to sell it — a new shop, direct billing, license management, all the things a marketplace had previously handled invisibly. QRcdr PRO launched in parallel with rebuilding my entire distribution from scratch. That’s a different kind of year than “I had a working codebase and added a payment layer.”

The 4-hour build flex

Lately, dev communities are full of the same post: “I built a full SaaS in 4 hours with AI.” Sometimes it’s genuinely impressive as a demo. Sometimes it’s a working prototype. What it rarely is, is something that’s been stress-tested against the boring stuff that actually matters once real users and real money are involved: edge cases, what happens when two features interact in a way nobody planned for, what happens at 10x the load you tested with.

None of that shows up in a 4-hour demo, because none of that shows up until later — usually right when you can least afford it.

Old school, not anti-AI

To be clear, this isn’t an anti-AI take. I use it every day. But there’s one place I stayed old school.
I want to know exactly what is happening inside my application. “As long as it works” feels like a finish line. In a rapid 4-hour build, it is actually a dangerous starting point.

The week I had to reset everything

More than once, I paid for moving too fast — and most of the time, looking back, it came down to me, not the tool. A vague prompt instead of a precise one. Pointing the AI at one file or directory and forgetting to mention the other places that same logic touched. The AI did exactly what it was asked; the ask just wasn’t complete. Twice that turned into a full reset, hours of work thrown away. A solution that quietly over-engineered something with a much simpler answer, or a change that “fixed” one spot while breaking an assumption elsewhere in the app that hadn’t been flagged.

Nothing dramatic in the moment. Just code that looked fine, ran fine on its own, and then didn’t once it touched the rest of the system. Untangling that costs more time than being precise the first time would have — and that’s as much a lesson about my own habits as it is about the tool.

The Prompt as a Logic Exercise

My workflow eventually evolved into assigning surgical, single tasks. But something unexpected happened: I often found the answer while merely preparing the request.

Explaining context and constraints to a machine forces a deep mental review. By the time I finished typing, the source of the bug was usually staring me in the face. The AI hadn’t even processed the text yet, but the clarity was already there.

This logical discipline is exactly what the 4-hour build skips. It trades a deep understanding of the system for a quick output that, more often than not, remains hollow.

Why this matters for QRcdr

QRcdr PRO is exactly the kind of project where cutting corners has a real cost — subscriptions, billing, dynamic content that gets swapped after the QR code is already printed and out in the world. I’m not saying I got everything right the first time. But taking the time to understand what I was building, and why, is the only way I know to limit the damage when something does go wrong. And something most likely will, eventually.

Speed is great, but I’d rather still be standing a year from now. Are you leaning into the '4-hour build' for your recent launches, or are you finding that building a sustainable, direct-sales infrastructure still requires a much longer runway?

From July 1st, Envato eliminates exclusive author tiers. Every author drops to 50% flat — regardless of sales history or Elite status.

For me, that’s the push I needed to move my products to my own store entirely.

The technical part was straightforward. The harder part is something I didn’t fully appreciate until now: when buyers purchased on CodeCanyon, they weren’t just trusting my product. They were trusting the marketplace context — familiar checkout, known brand, perceived safety net.

I have over a decade of sales across multiple products, thousands of buyers.

Moving to an independent store means rebuilding that purchase confidence from scratch, without the Envato wrapper.

Has anyone successfully migrated a loyal marketplace audience to a direct sales channel?

What actually signals trust to a buyer landing on an independent store for the first time?

For 12 years I sold a QR code generator script on CodeCanyon.

1,800 sales, 5-star rating — almost entirely on autopilot. Envato did the distribution, I just shipped updates.

This year I decided to own my audience. I launched a hosted SaaS and a WordPress plugin for agencies who want to resell QR codes under their own brand.

Result: 3 paying customers, all from my existing newsletter. Zero from cold traffic.

The uncomfortable truth: I’ve never actually done customer acquisition. Envato did it for me for a decade, and I didn’t notice until now.

Has anyone made this jump — from marketplace dependency to owning your own traffic?

What actually moved the needle?