Bits & Brews

Stories about PHP, WordPress, web development, debugging, security, and lessons learned from real projects.

Posts

WordPress security basics that actually matter - Six security basics that stop most attacks: updates, strong passwords, login limits, removing unused plugins, backups, and HTTPS.
WordPress 7.0: the wp2shell bug that got every hosting company emailing you - When a bug in WordPress core forces every hosting company on the internet to email their customers, it is worth understanding. What wp2shell did, why it worked, and the small routines that decide whether your site survives the next one.