Fix ACF PRO to output unfiltered HTML
Notes from 2024 on ACF's HTML escaping changes, with field-output examples and security cautions for allowing unfiltered HTML in selected fields.
Securing Your Website: Cloudways Vulnerability Scanner Alerts
A 2023 guide to understanding Cloudways vulnerability alerts, checking outdated plugins and testing updates on staging before changing a live site.
WooCommerce 6 Released
A December 2021 overview of WooCommerce 6.0, including block templates, product attribute filtering, rate-limit storage and the release changelog.
Off The Shelf vs Bespoke Wordpress themes
A comparison of off-the-shelf and bespoke WordPress themes, covering cost, design, performance, flexibility and future development.
Show a small, safe list of links from an RSS feed
Use WordPress's feed parser and cache, handle unavailable feeds, and escape external titles and links before rendering them.
Redirect old numbered URLs without breaking useful numbers
A tightly scoped Apache rule for a known legacy URL pattern, with checks for collisions, query strings and permanent redirect mistakes.
Stop New Relic injecting browser scripts into WordPress AMP pages
Disable automatic browser instrumentation only on AMP responses without editing a plugin or switching off server-side monitoring.
Update a footer year without document.write
Keep a footer year current using a small JavaScript enhancement or a server-rendered PHP date, with a readable fallback.
Move WordPress to HTTPS without redirect loops
Establish working TLS, update the correct WordPress addresses and add HTTPS redirects in the layer that actually terminates the connection.
