Profiling a Slow WordPress Site with Query Monitor
Query Monitor turns a vague feeling that your site is slow into a specific list of queries, hooks, and requests to fix. Here is how to read its panels and act on what you find.
Tag
wp-cli
All posts in this stream, newest first.
An Incident Response Plan Sized for a Small Site
You do not need a security operations center to handle a hack well. You need a short plan you wrote before the bad day, and this is the template.
SEO Spam, Redirect Hacks, and Miners: WordPress Malware Taxonomy
Not all WordPress infections look the same because they aren't built for the same purpose. Here's how to recognize the common categories and what each one is actually trying to do to your site.
Bringing Order to a 10,000-File Media Library
A practical plan for taming a sprawling WordPress media library: choosing between folders and taxonomies, hunting down the orphaned files nobody uses, and regenerating thumbnails without taking the site down.
cPanel, Plesk, and the New Wave of Hosting Panels
Control panels promise to make server administration painless, but the panel you're handed shapes your costs, your flexibility, and how hard it is to leave. Here's what they actually do and how to judge lock-in before it becomes a problem.
Cross-Site Scripting: The Most Common WordPress Plugin Flaw
XSS shows up in plugin vulnerability disclosures more than any other bug class. Here's what stored and reflected XSS actually do, why an admin's browser is the real prize, and how proper escaping closes the door.
Technical SEO for WordPress: The Foundation Before Content
Before you write another word of content, make sure search engines can actually find, crawl, and trust your pages. Here is the technical SEO checklist to run in under an hour.
Finding Backdoors: Where Attackers Hide in WordPress
A compromised site rarely gets fully cleaned on the first pass. Here is where attackers plant their return tickets, and how to find and remove them systematically.
Staging Sites: The Habit That Prevents Most Self-Inflicted Outages
Most WordPress outages aren't attacks, they're untested changes hitting production first. Here's what belongs on staging, which direction the database should sync, and a workflow light enough for a solo site owner to actually follow.
API Keys and Secrets: Stop Committing Them to the Theme
A practical guide to keeping API keys and credentials out of your WordPress codebase, building a rotation habit, and responding fast when a secret does leak.