Blog
Thoughts & Insights
Articles on web development, WordPress engineering, performance optimization, and lessons learned building products for clients worldwide.
Latest Articles
From the Blog
Safe Content Migrations with WP-CLI
Create a resumable WP-CLI content migration with dry runs, bounded batches, idempotent updates, progress reporting, and a practical rollback plan.
Validation, Sanitization, and Escaping in a WordPress Plugin
Learn where validation, sanitization, and escaping belong in a WordPress plugin through one complete metadata example with secure input and output.
Nonces and Capabilities in a Secure WordPress Admin Form
Secure a custom WordPress admin form correctly by combining capability checks, nonces, strict input validation, safe redirects, and escaped output.
Build a WordPress Settings Page with the Settings API
Build a secure WordPress plugin settings page with the Settings API, capability checks, validation, contextual help, and maintainable defaults.
WebAssembly JSPI Makes Async Integration Cleaner, Not Automatically Faster
Safari 27 beta adds WebAssembly JavaScript Promise Integration, allowing WebAssembly code to cooperate with asynchronous JavaScript APIs without manual suspensi
A Public WordPress Ability Is Discoverable, Not Automatically Safe
WordPress 7.1 adds a unified public metadata flag for abilities intended for REST clients, MCP adapters, and AI agents. Plugin authors can express external disc
Inertia DevTools Makes Hydrated Props Visible—That Includes the Ones You Should Not Send
Laravel announced Inertia DevTools for inspecting requests, headers, and hydrated props moving between a Laravel backend and Inertia frontend. Developers can di
Queue Reliability Is Customer Experience Even When Nobody Sees the Queue
Modern application platforms are making ordered queues, failed-job visibility, scheduled scaling, and longer background processing easier to operate. Reliable b
Chrome’s Two-Week Release Cycle Changes How You Triage Browser Regressions
Chrome moves stable milestones from a four-week to a two-week cadence beginning with Chrome 153 in September 2026. Smaller releases can deliver fixes and platfo
MCP Allowlists Belong Next to Repository and Secret Policies
GitHub added MCP allowlists to enterprise managed settings, giving organizations a central way to limit which servers coding agents can use. Security teams can
Customizable select Can Remove JavaScript Without Removing Accessibility
Safari 27 beta adds support for customizable select, advancing a native HTML control that can be styled without rebuilding its behavior from scratch in JavaScri
Native Form Controls Are a Maintenance Strategy, Not a Design Compromise
Browser support for richer native controls is reducing the need to rebuild familiar form behavior with custom JavaScript widgets. Using the platform can lower c
Ready to Build Something That Works?
Tell me about your project and get a free quote within 24 hours. No commitment, no pressure.