Coast Internet Radio
A website for a radio station in Newry, with live listening, track information and an editor the presenter can use himself.
- HTML
- CSS
- JavaScript
- Netlify Functions
- Cloudflare Workers
- Python
- Flask
- SQLAlchemy
- pytest
Visit coastinternetradio.com Website code Coast Requests code
Coast Internet Radio is a small station in Newry run by a family member, playing country, Irish country and classic hits 24 hours a day. Most of its listeners are older and not very confident with technology, so the site has to be simple to use.
The website
- A live player that keeps playing as you move between pages, and shows the song playing now with its album cover.
- The station's stream and track information are only available over HTTP. Two Cloudflare Workers serve them over HTTPS so they play on the secure site.
- An editor at
/admin/where the presenter changes the words, photos, colours, home page layout, news and show times himself, with preview, publish and undo. - Plain HTML, CSS and JavaScript on Netlify. Sign-in, saving and publishing use Netlify Functions and Blobs, with a hashed password and a signed sign-in cookie. 24 tests run before each deploy.
I built the first version in May 2026 using online tutorials, my class notes and some help from AI tools, and rebuilt it in October 2026 with Claude Code assisting with the code. I worked out with the presenter what he needed, made the design decisions, tested each change on the live site and moved the domain over.
Coast Requests
The problem. Song requests only arrived by email, so during a live show the presenter had to search his inbox to find them.
The fix. A request board. Each request appears in one list, oldest first, and he taps Played as he goes. The board checks for new requests every 20 seconds and reloads only when something has changed.
How it works.
- A listener fills in the request form on coastinternetradio.com.
- Netlify Forms emails it to the station as before, and also sends it to the Flask app as a signed webhook.
- The app checks Netlify's signature over the exact request body, refuses anything unsigned, then stores the request in SQLite through SQLAlchemy.
- The presenter signs in and works through the list.
Testing and security. 23 pytest tests run on GitHub Actions. They cover the webhook signature, duplicate and unwanted submissions, sign-in, CSRF protection, marking requests played, escaping listeners' text and UK times. The password is stored only as a hash, every form has a CSRF token, and a Content-Security-Policy allows only the app's own files. It's hosted on PythonAnywhere, and Claude Code assisted with the code.
Next steps. Pause sign-in after several wrong passwords, and add a "can't play this one" option with a reason.