52 articles
Every article tagged WordPress, newest first. Search all articles
Monitoring11 min read
Run a WordPress backup restore test and prove recovery works
A WordPress backup restore test should end with a working isolated copy, a timed recovery log, and a pass/fail record for the business tasks that matter. Restore a representative backup away from production, verify the files and database together, run defined checks, and record anything missing or unavailable.
Development11 min read
Custom WordPress plugin cost: what to include in the brief
A useful custom WordPress plugin cost estimate starts with a brief that turns workflows, users, integrations, failure paths, acceptance checks, and ownership into scope.
Development8 min read
ACF blocks vs native Gutenberg blocks: what to build for a client site
For most client sites, the ACF blocks vs Gutenberg blocks choice comes down to editor needs, team skills and how much JavaScript you want to own. ACF Blocks reduce custom editor code when ACF fields fit the UI, and v3 can provide inline editing for simple fields.
Development7 min read
"This block contains unexpected or invalid content": fixing validation errors
If you searched for "block validation failed WordPress," the editor is telling you that stored block markup no longer matches what the current save() function generates from the attributes it can parse.
Security12 min read
How to clean a hacked WordPress site and stop it happening again
To clean a hacked WordPress site, contain it and keep a copy of the compromised files and database, then find what changed and replace compromised code from trusted sources. Close the entry point, rotate credentials and salts, clear search warnings and watch for reinfection.
Security7 min read
Cloudflare WAF rules for WordPress that block attacks, not customers
Cloudflare WAF rules for WordPress should match narrow paths, start in observation mode, and exclude machine-to-machine traffic before enforcement. Use custom rules for path-based blocking or challenges, rate limiting rules for repeated requests, and managed rules for Cloudflare-maintained exploit detection.
Development8 min read
WordPress custom tables vs custom post types for plugin data
For a WordPress custom table vs custom post type decision, use a custom post type when your data behaves like editable WordPress content. Use a custom table when the data is high-volume, query-heavy, or needs typed columns and indexes that match your plugin's access patterns.
Enterprise7 min read
High-traffic WordPress architecture: the layers that carry the load
For high traffic WordPress, the edge and full-page cache should absorb most anonymous page views before PHP runs. Capacity problems appear when too much traffic reaches PHP, the object cache, the database, search, or media processing at once.
Security7 min read
Secure WordPress REST API endpoints: permission callbacks that hold up
A WordPress REST API permission_callback should answer one question: can this authenticated user perform this specific action on this specific object? Pair that check with the right authentication method, strict argument validation, a narrow response shape, and limits on expensive or sensitive requests.