Core Trimmed Its PHPUnit Matrix. Do the Same to Yours.
Core cut its PHPUnit matrix by 52 percent and halved its rerun rate. How to apply the same reasoning to a plugin test suite.
Code Snippets10 min read
Category: How To
WordPress Auto-Updates at Fleet Scale: The WP-CLI Setup
Which of your sites were unpatched last Friday? A defensible auto-update policy, a WP-CLI fleet inventory you can query, verification that runs itself, and an emergency patch path for the next zero-day.
How To11 min read
WordPress Dynamic Hooks: The Complete save_post_{type} Guide
Learn how WordPress dynamic hooks like save_post_{$post_type}, manage_{$screen->id}_columns, and theme_mod_{$name} work, with code examples and gotchas.
Code Snippets14 min read
WordPress Shutdown Hook: How to Run Code After Page Output Is Complete
How the WordPress shutdown action fires, how it differs from register_shutdown_function, and practical patterns for deferred logging, post-response API calls, fastcgi_finish_request, and fatal error capture.
Code Snippets10 min read
How to Prevent XSS in WordPress: Sanitization and Escaping Functions Guide
Maps every WordPress esc_*, wp_kses_*, and sanitize_* function to its exact context, with the 'sanitize on input, escape on output' rule that eliminates XSS.
How To9 min read
WordPress Hook Priority Explained: How Action and Filter Execution Order Works
How WordPress hook priority numbers work, how to remove object method and closure callbacks, and runtime tools like doing_action(), did_action(), and $wp_filter inspection.
How To7 min read
PHP-FPM Tuning for WordPress: How to Calculate Workers, Memory, and Timeouts
PHP-FPM tuning guide for WordPress: how to calculate pm.max_children from actual memory usage, set spare server counts, configure request timeouts, and monitor pool health.
How To7 min read
Nginx FastCGI Cache for WordPress: Complete Setup and Purge Guide
Complete Nginx FastCGI cache setup for WordPress: cache zone config, logged-in user bypass, WooCommerce exclusions, purge on publish, and HIT/MISS header debugging.
How To7 min read
PHP OPcache Settings for WordPress: Configuration Guide with Benchmarks
OPcache configuration guide for WordPress covering memory_consumption, max_accelerated_files, revalidate_freq, JIT settings, and how to verify hit rate on production.
How To7 min read
WordPress Malware Cleanup: Developer's Step-by-Step Recovery Checklist
Step-by-step WordPress malware cleanup checklist covering core file verification, database injection scans, hidden admin detection, cron backdoors, and post-cleanup hardening.
How To7 min read
WordPress SQL Injection Prevention: $wpdb->prepare() Deep Dive
Every WordPress database query that concatenates user input without $wpdb->prepare() is a ticking time bomb. This guide covers every prepare() pattern in production code.
How To12 min read
WordPress Login Security: Rate Limiting, Custom URL, and Brute Force Protection
Harden WordPress login with PHP rate limiting via transients, a custom login URL using rewrite rules, Application Password controls, and TOTP 2FA. No plugins required.
Backup and Security8 min read
