52 articles
Every article tagged WordPress, newest first. Search all articles
Enterprise7 min read
Must-use plugins in WordPress: what belongs there and how to load them
WordPress MU plugins are PHP plugins that WordPress loads automatically from a special directory before normal plugins. Use them for code that is part of the platform and must stay enabled, then keep optional features and third-party packages in the normal plugins directory.
Performance7 min read
WordPress OPcache settings: size it, check it and keep it warm
WordPress OPcache settings should be sized from the cache your PHP-FPM workers are using, not from a copied tuning block. Check the live OPcache status, count the PHP files in the active release, then make deployment resets and warm-up part of the release process.
Performance8 min read
WordPress PHP workers: size them, spot saturation and use fewer
WordPress PHP workers are PHP-FPM child processes that execute uncached PHP requests, and pm.max_children caps how many a pool can serve at once. Size the pool from measured worker memory and available RAM, then confirm saturation with the PHP-FPM status page and logs before adding workers.
Development7 min read
End-to-end WordPress Playwright testing for editor, admin and checkout
WordPress Playwright testing lets a browser verify the editor, wp-admin, and checkout paths that a release depends on. Run those flows against wp-env, reuse a saved admin session, keep test data fixed, and save traces and screenshots when CI fails.
Development5 min read
WordPress plugin database migrations with dbDelta, done safely
WordPress plugin database migrations should compare a stored schema version with the version your plugin expects, then run only the missing steps. Use dbDelta() for table creation and supported schema changes, and use explicit, guarded migrations for destructive or unsupported changes.
Security8 min read
WordPress plugin supply chain security: when the update itself is the attack
WordPress plugin supply chain security treats the update channel itself as something you must verify, not just a way to receive fixes. Use trusted sources, inspect unusual releases, verify installed files, and stage updates so one bad package does not reach every site at once.
Development7 min read
WordPress plugin unit testing with wp-env and PHPUnit
WordPress plugin unit testing stays repeatable when pure PHP tests stay small and WordPress integration tests run in a wp-env environment. Set up wp-env, bootstrap the WordPress PHPUnit files through WP_TESTS_DIR, write tests with WP_UnitTestCase, then run the same command in GitHub Actions.
Monitoring8 min read
WordPress plugin vulnerability monitoring: from alert to fix
WordPress vulnerability monitoring works when you keep a current inventory of installed plugins and themes. Compare exact versions with trusted vulnerability data, then record what you did with each match.
Performance8 min read
WordPress REST API performance: find slow endpoints and make them fast
WordPress REST API performance improves when you measure the request first, reduce the work each endpoint does, and cache only responses that are safe to share. Start with time to first byte, then trace database queries, remote HTTP calls, response building, authentication and cache behavior before changing code.