Practical guides on WordPress security, WooCommerce, Core Web Vitals, development and monitoring, checked against primary documentation before publishing.
Try· press / to search · typos are fine
66 articles
Performance8 min read
PageSpeed good, Core Web Vitals failed: read the right data
If PageSpeed looks good but Core Web Vitals failed, check the data source before you change WordPress. The green Lighthouse score and the failed Core Web Vitals assessment can both be correct because they measure different populations, time periods and conditions.
Security14 min read
PHP critical security update: PHP2Shell leak and fixes
PHP released a PHP critical security update on Wednesday, October 21, 2026, for two vulnerabilities known as PHP2Shell that allow remote code execution without authentication. The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Development8 min read
AI automation cost for small business: a workflow worksheet
To estimate AI automation cost for a small business, price one workflow in four layers: setup, recurring cash charges, usage and retries, and staff time for review and maintenance. Then divide the full monthly operating cost by accepted results and compare it with the manual cost of the same volume.
Performance8 min read
Fix INP in WordPress by finding the slow interaction
To fix INP in WordPress, start by reproducing the exact tap or key interaction that feels slow, then record it in Chrome DevTools and split its delay into input, processing, and presentation.
Monitoring11 min read
Run a WordPress backup restore test and prove recovery works
A WordPress backup restore test should end with a working isolated copy, a timed recovery log, and a pass/fail record for the business tasks that matter. Restore a representative backup away from production, verify the files and database together, run defined checks, and record anything missing or unavailable.
Development11 min read
Custom WordPress plugin cost: what to include in the brief
A useful custom WordPress plugin cost estimate starts with a brief that turns workflows, users, integrations, failure paths, acceptance checks, and ownership into scope.
Performance10 min read
WooCommerce checkout slow: diagnose the request that blocks payment
When your WooCommerce checkout is slow, start with the single browser request that begins when the delay begins. Record that request's timing, then match it to a server trace so you can separate browser delay from WooCommerce, shipping, tax, gateway, database, or server work.
Development8 min read
AI vs rule based automation: when a small business needs AI
For AI vs rule based automation, use rules when the correct action follows fixed inputs, use AI when the task depends on meaning in messy text, and keep a person involved when a wrong action is costly or hard to reverse. Do not decide from a product label.
Development8 min read
ACF blocks vs native Gutenberg blocks: what to build for a client site
For most client sites, the ACF blocks vs Gutenberg blocks choice comes down to editor needs, team skills and how much JavaScript you want to own. ACF Blocks reduce custom editor code when ACF fields fit the UI, and v3 can provide inline editing for simple fields.