I am currently creating a personal "local" website. I do not plan on port fowarding to make it accessible to those outside my network. Will that be good enough for security, what about people on the same local network as I am, how can I block any other PCs from accessing my website, or password protect it?
I feel that HTTPS is not needed for this type of setup due to it being a local website, but I have connection to many APIs: Google Maps API, Facebook API, etc. Can my site be compromised without having HTTPS?