Blog & news

Security

PHP and WordPress news worth knowing, plus field notes on integrations, ecommerce and the bugs that take a while to find.

All articles

Mar 17, 2026 · 5 min read

If the web server can write to your theme and plugin files, so can an attacker who finds one hole. A simple ownership policy that limits the damage.

A lot of cookie banners are decoration: the tags fire anyway. How to wire a consent platform and Google Tag Manager so tracking waits for consent.

One email when something new is published. PHP and WordPress updates, field notes, no spam.