SERVERBORNForged for speed
The ServerBorn blog

Notes from the forge.

Performance engineering, security hardening, and WordPress operations. Written by the people who run the metal.

The Transients API: Caching Expensive Work Inside WordPress

Transients let you store the result of a slow API call or heavy query so WordPress does not repeat that work on every page load. Here is how to use them correctly, including how they behave once a persistent object cache is in the picture.

by Robbie·Jun 6, 2026·5 min read

CSRF: The Attack That Rides Your Login Session

Cross-site request forgery tricks your browser into spending your login session on the attacker's behalf. Here's how it works, how WordPress's nonce system helps, and what to check when a plugin's defenses are not enough.

by Robbie·Jun 5, 2026·5 min read