Practical guides on WordPress security, WooCommerce, Core Web Vitals, development and monitoring, checked against primary documentation before publishing.
Try· press / to search · typos are fine
71 articles
Monitoring11 min read
Run a WordPress backup restore test and prove recovery works
A WordPress backup restore test should end with a working isolated copy, a timed recovery log, and a pass/fail record for the business tasks that matter. Restore a representative backup away from production, verify the files and database together, run defined checks, and record anything missing or unavailable.
Development11 min read
Custom WordPress plugin cost: what to include in the brief
A useful custom WordPress plugin cost estimate starts with a brief that turns workflows, users, integrations, failure paths, acceptance checks, and ownership into scope.
Performance10 min read
WooCommerce checkout slow: diagnose the request that blocks payment
When your WooCommerce checkout is slow, start with the single browser request that begins when the delay begins. Record that request's timing, then match it to a server trace so you can separate browser delay from WooCommerce, shipping, tax, gateway, database, or server work.
Development8 min read
AI vs rule based automation: when a small business needs AI
For AI vs rule based automation, use rules when the correct action follows fixed inputs, use AI when the task depends on meaning in messy text, and keep a person involved when a wrong action is costly or hard to reverse. Do not decide from a product label.
Development8 min read
ACF blocks vs native Gutenberg blocks: what to build for a client site
For most client sites, the ACF blocks vs Gutenberg blocks choice comes down to editor needs, team skills and how much JavaScript you want to own. ACF Blocks reduce custom editor code when ACF fields fit the UI, and v3 can provide inline editing for simple fields.
Development7 min read
"This block contains unexpected or invalid content": fixing validation errors
If you searched for "block validation failed WordPress," the editor is telling you that stored block markup no longer matches what the current save() function generates from the attributes it can parse.
Security12 min read
How to clean a hacked WordPress site and stop it happening again
To clean a hacked WordPress site, contain it and keep a copy of the compromised files and database, then find what changed and replace compromised code from trusted sources. Close the entry point, rotate credentials and salts, clear search warnings and watch for reinfection.
Security7 min read
Cloudflare WAF rules for WordPress that block attacks, not customers
Cloudflare WAF rules for WordPress should match narrow paths, start in observation mode, and exclude machine-to-machine traffic before enforcement. Use custom rules for path-based blocking or challenges, rate limiting rules for repeated requests, and managed rules for Cloudflare-maintained exploit detection.
Development8 min read
WordPress custom tables vs custom post types for plugin data
For a WordPress custom table vs custom post type decision, use a custom post type when your data behaves like editable WordPress content. Use a custom table when the data is high-volume, query-heavy, or needs typed columns and indexes that match your plugin's access patterns.