How to Set Up Pinterest Rich Pins: A Step-by-Step Guide for Maximum Engagement
Picture a regular pin as a snapshot. It shows what your page looked like the day you pinned it, and it
Snippets
A collection of web development tutorials and code snippets for WordPress, PHP, JavaScript, CSS and many more.
WordPress Plugin PHP 8 Compatibility Guide: Solutions for Smooth Upgrades
Your host flips a server to PHP 8. A plugin that ran clean yesterday throws a fatal error today. Nobody touched
WordPress PHP 8 Upgrade Guide: Seamlessly Migrate for Speed and Security
Your host has been nudging you about this for months. Maybe there’s a notice in your dashboard, or an email warning
Understanding and Preventing CSS-Based Clickjacking Attacks
You think you’re clicking a “Play” button. You’re actually confirming a payment, granting a permission, or liking a page you’ve never
Securing WordPress Database Queries Against SQL Injection Vulnerabilities
One stray quote mark in a username field is all it takes. A visitor types ‘ OR ‘1’=’1 where your form
Securing WordPress Themes Against Backdoor Vulnerabilities
Here’s the part that keeps site owners up at night: your WordPress site can look completely fine while an attacker still
Securing PHP Applications: Stopping SQL Injection with Prepared Statements
One line of careless PHP is all it takes. A login form that drops a username straight into a query string,
How CSS Is Used in Phishing Attacks: Techniques and Prevention
You land on what looks like your bank’s login page. The logo’s right, the fonts match, the button has that familiar
How to Use PHP iconv() for Better Character Encoding Management
Pull a product feed from a supplier, drop it into your database, and watch half the names come back as question
How to Migrate Legacy PHP Code to Object-Oriented Structure with PDO
You inherit a PHP app that works. It also has SQL queries built by gluing strings together, database calls scattered through
How to Migrate from mysql_* to PDO in PHP for Better Security
You upgrade a server, run your app on PHP 7, and half of it goes dark. The culprit is almost always
How to Secure Your PHP Application by Using Prepared Statements
Here’s a bug that has burned more developers than almost any other: you drop a variable straight into a SQL string,
How to Prevent Session Hijacking: Secure PHP Session Management
A user logs in. Your app hands them a session ID. From that moment on, that little string is the only
The Dangers of Using PHP’s eval() Function: Risks and Secure Alternatives
Most PHP backdoors we clean off hacked WordPress sites share one line: eval(). It hands attackers a way to run whatever
Understanding PHP Deserialization Vulnerabilities and Preventing Remote Code Execution
A single line, unserialize($_GET[‘data’]), has handed attackers full control of more servers than most developers would like to admit. It looks
Understanding and Preventing XSS Attacks in JavaScript Applications
One malicious string in the wrong text box, and an attacker is running code inside your users’ browsers, on your domain,
Defending Against CSS-Based Attacks: Best Practices for Web Security
Most of us think of CSS as harmless. It paints the page. It can’t run code, it can’t read your keystrokes,
How to Efficiently Manage PHP Dependencies with Composer
If you’ve ever managed PHP dependencies by hand, you know the drill. Download a zip, drop it in a lib folder,
How to Add and Customize Dashicons in WordPress
You want an icon next to a custom menu item, a button, or a widget, and you’d rather not pull in
Modernizing PHP Error Handling and Logging: Best Practices and Techniques
An uncaught error at 2am tells you two things: what broke, and how badly your logging let you down. If the