Latest Security Intro
Update order: core, then plugins, then theme
Updating everything at once is quick, but when it breaks you cannot tell what did it. An order with checks in between is not slower — it keeps attribution possible.
Technote
WordPress know-how, from real work Technotes worth picking
283 articles
Themes & plugins Intro
When a custom post type earns its place
Pages are usually enough. But the point where they stop working is quite distinct — and the signal is not how many items you have, it is whether…
SEO Intro
Do you actually have a reason to add a language?
A second language is not a feature, it is an operating commitment. Every screen you build from then on comes in two — so decide from visitor data,…
Working with AI Advanced
Security review for AI-written code: four recurring gaps
Generated code usually looks idiomatic. The trouble is that it can look idiomatic while omitting precisely the escaping, the prepared statement, the capability check or the path validation…
SEO Intro
Draw the sitemap before the screens
Design screens first and you end up retrofitting the relationships between them. Structure decides URLs, navigation and what search can find.
Servers & infrastructure Intro
Watching only the home page misses outages
Plenty of sites have uptime monitoring and still miss outages. The cause is usually the same: the page being checked never touches the database.
Development workflow Intro
The pre-migration inventory: what you forget lives outside the site
Files and databases are hard to forget. What breaks on cutover day is the thing you registered somewhere else years ago and never looked at again.
Security Intro
Hardening starts by counting your administrators
However many doors you close in configuration, eight people holding keys means eight things to protect. A role audit comes before every other hardening step.
Working with AI Advanced
A project context file, so the same mistake is not repeated
Every session starts blank, but a project's decisions and incident history must not. Collect conventions, reasoning, traps already hit and regression checks in one document, and the same…
Servers & infrastructure Intro
The first five minutes: scope before cause
Hunting for the cause first costs you time. Establish the scope and the log you need is already decided, with half the candidates gone.
Security Intro
What to back up: code, database and uploads are not alike
Manage it as one lump called "the full backup" and an incident leaves you no options. The three parts change at different rates and restore along different paths.
Working with AI Practical
What AI code review catches, and what it cannot
Missing escaping and missing capability checks are caught reliably. What has to be executed to be known — runtime behaviour, hook ordering across plugins, whether the change matches…
Cited
Technotes worth reading next
Topics outside WordPress are collected on Dongji Communication Tech Insights, run by the same team. The summaries below are quoted from the originals; the titles link to them.
-
Working with AI
Writing a CLAUDE.md — teaching an AI coding assistant your project
AI coding tools such as Claude Code, Cursor and Copilot do better work the more precisely they know your project. Here is a structure and a set of principles that hold up.
-
Working with AI
Prompting an AI for UI design — drafting with Claude and GPT
Asking an AI to "make a nice button" gets you a disappointing button. Structured prompts that carry constraints, references and a defined role get you the design you meant.
-
Themes & plugins
SCSS from the ground up — variables through module structure
The core syntax of SCSS (Sass) and what it solves that plain CSS cannot: variables, nesting, mixins, @use and module structure — organised around patterns you can use immediately.
-
Themes & plugins
Design tokens and theme colour systems — brand identity in SCSS variables
How to turn a colour palette from a pile of hex codes into a system that means something — semantic token structure and SCSS variable patterns, from a real project.
-
Performance optimization
Designing a responsive typography system — the science of readability
Hard-coded pixel font sizes are over. Type scales, fluid sizing with clamp(), Korean webfont optimisation and line-height ratios — building typography that reads well on any screen.
-
Development workflow
From Figma to SCSS — a designer-developer handoff guide
Minimising what gets lost between a Figma file and the code: extracting tokens, naming components, keeping the spacing system in sync — the whole workflow, step by step.