Category
Hands-on guides for developers and site owners who run WordPress in production. Covers plugin and theme code, security, performance and caching, server tuning and upgrades, with an AI angle where it earns its place.
A WordPress page can show impressions and still read “URL is unknown to Google”. How to read Inspection, Page indexing and Performance by their dates, and what the Request indexing error means.
On a cached WordPress site, decide consent in the browser, not in PHP: print one hidden banner on every page, hold Jetpack Stats as inert text and start Tag Manager only after Accept.
When a WordPress page stays stale after a Cloudflare purge, a cache is still holding the old copy. Purge the host first and check it, because a Cloudflare purge refills from whatever the host still holds.
After days of WP-Cron downtime, the first run meets the whole Action Scheduler backlog at once. How to count it, run it in bounded WP-CLI passes, and read the counts.
A sudden jump in GA4 views on a WordPress site can be one automated browser. How to spot it in the Pages and screens report, why GA4 has no bot-filter switch to turn on, and how to report around it.
Four security rules that fit Cloudflare’s Free plan for a WordPress site, the exclusions each one needs, and the two gaps a test of path variants found: an uncounted login side door and a word match that blocked a harmless post slug.
On 20i shared hosting, StackProtect can refuse AI crawlers that Cloudflare allows. What to ask support, what one site’s ticket got back, how the counts changed afterwards and which crawler names were still refused.
A server cron job can exit cleanly and still run nothing when a blocked wp-cron.php request leaves the doing_cron lock in place. How the lock works, how to prove it with a timeline, and the safe order to fix it.
When Cloudflare shows AI crawlers failing with 403 and 429, the refusal may have come from Cloudflare, the host or WordPress. How to tell them apart from response headers, the origin log and a careful spoofed user agent test.
A Cloudflare rule written to stop bots can also stop WordPress running its own cron. How to confirm the challenge, run cron with PHP on the server, and read the warnings that remain.
PHP 8.6 is scheduled for 19 November 2026. What 8.6.0RC3 adds and deprecates, what broke when WordPress, WooCommerce and Magento code ran on it, and which PHP 8.5 syntax is safe to use now.
WordPress plugin bugs are attacked within hours of disclosure. A WP-CLI patching routine, what its checks cannot prove, what covers the window before a fix exists, and how to check AI-written plugin code.
