Archive
Browse the full site by page: releases, plugins, themes, SEO, performance, troubleshooting, operations, and security coverage.
Lead on Page 14
Build a safe WordPress shortcode with shortcode_atts, sanitized attributes, escaped output, controlled HTML, CSS loading, and production testing.
Build Pattern
Extension points, code paths, and implementation choices that should survive contact with production.
April 16, 2026 · 5 min read
Build a safe WordPress shortcode with shortcode_atts, sanitized attributes, escaped output, controlled HTML, CSS loading, and production testing.
Build Pattern
Extension points, code paths, and implementation choices that should survive contact with production.
April 16, 2026 · 5 min read
A practical custom post type plugin example covering register_post_type(), REST visibility, archives, rewrite rules, and production validation checks.
Build Pattern
Extension points, code paths, and implementation choices that should survive contact with production.
April 15, 2026 · 6 min read
A practical WordPress register_rest_route example with full plugin code, route arguments, permission_callback, and when the endpoint belongs in a plugin instead of functions.php.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 14, 2026 · 5 min read
A production checklist for WordPress dashboard file editing: use DISALLOW_FILE_EDIT or DISALLOW_FILE_MODS intentionally and remove casual code changes from wp-admin.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 14, 2026 · 5 min read
A production checklist for WordPress REST API exposure: inventory routes, confirm what is public, and review authentication for external clients.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 14, 2026 · 5 min read
A production checklist for WordPress updates: verify backups, scope the change, use WP-CLI deliberately, and confirm the site is healthy afterwards.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 14, 2026 · 5 min read
A production checklist for WordPress search-replace: use dry runs, scope tables carefully, and avoid damaging serialized data during migrations.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 14, 2026 · 5 min read
A production checklist for WordPress theme inventory: separate active, parent, and inactive themes, and remove dormant theme code safely.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 13, 2026 · 6 min read
A production checklist for WordPress file permissions: review ownership, keep writable paths narrow, and make sure code directories are not writable without a reason.
Control Ledger
Baselines, access reduction, and default settings that stand up in production.
April 13, 2026 · 6 min read
A production checklist for WordPress plugin cleanup: review inactive plugins, separate mu-plugins, and remove dormant code that no longer belongs on live systems.