September 2026
Everything we published in September 2026.
High-Performance WordPress Asset Management & Scripts
Best practices for high-performance WordPress asset management: conditional script enqueueing, ES modules, and deferred scripts.
Mastering Custom Post Types in Modern WordPress
Comprehensive guide to mastering custom post types in WordPress with REST API exposure, rewrite rules, and block template locking.
Advanced WordPress Taxonomy Architecture: Terms & Tags
Architect scalable WordPress applications: advanced WordPress taxonomy architecture comparing hierarchical and flat classification.
Implementing Two-Factor Authentication (2FA) in WP
Step-by-step guide to implementing two-factor authentication (2FA) in WordPress using RFC 6238 TOTP and the authenticate filter.
Optimizing WordPress REST API Responses with Field Filtering
Reduce JSON payload size by 80%: optimizing WordPress REST API responses with _fields filtering and custom computed REST fields.
Preventing SQL Injections and XSS in WordPress Plugins
Learn best practices for preventing SQL injections and XSS in WordPress plugins with $wpdb->prepare() and output escaping functions.
Authenticating Headless WordPress Requests with Passwords
Learn best practices for authenticating headless WordPress requests using native Application Passwords, Bearer tokens, and JWT.
WordPress Hardening Checklist: wp-config & Directives
Complete WordPress hardening checklist: lock down wp-config.php, block upload directory execution, and prevent brute-force attacks.
Decoupled Headless WordPress with Next.js & Server Components
Architect decoupled headless WordPress with Next.js App Router, React Server Components, and Incremental Static Regeneration (ISR).
One letter,
once a Month.
Build logs, a worked example, and one tool we're using. Free, 3 minutes to read.