Plugin Architecture & Hooks
Action hooks, filter pipelines, and object-oriented WordPress architecture.
High-Performance WordPress Asset Management & Scripts
Best practices for high-performance WordPress asset management: conditional script enqueueing, ES modules, and deferred scripts.
Mastering Custom Post Types in Modern WordPress
Comprehensive guide to mastering custom post types in WordPress with REST API exposure, rewrite rules, and block template locking.
Implementing Two-Factor Authentication (2FA) in WP
Step-by-step guide to implementing two-factor authentication (2FA) in WordPress using RFC 6238 TOTP and the authenticate filter.
Optimizing WordPress REST API Responses with Field Filtering
Reduce JSON payload size by 80%: optimizing WordPress REST API responses with _fields filtering and custom computed REST fields.
Preventing SQL Injections and XSS in WordPress Plugins
Learn best practices for preventing SQL injections and XSS in WordPress plugins with $wpdb->prepare() and output escaping functions.
WordPress Hardening Checklist: wp-config & Directives
Complete WordPress hardening checklist: lock down wp-config.php, block upload directory execution, and prevent brute-force attacks.
Detecting and Cleaning WordPress Malware & Backdoors
Incident response guide for detecting and cleaning WordPress malware: remove obfuscated PHP webshells and verify file checksums.
How to Build a Custom REST API Endpoint in WordPress
Complete guide on how to register a custom REST API endpoint in WordPress with register_rest_route, validation, and permissions.
Mastering WooCommerce Hook Ecosystem: Checkout & Flows
Deep-dive tutorial on mastering WooCommerce hook ecosystem: inject custom fees, add checkout fields, and hook into order events.
One letter,
once a Month.
Build logs, a worked example, and one tool we're using. Free, 3 minutes to read.