Security Practical
The first hour after you discover a compromise
The most common mistake in this moment is deleting things in a hurry. Here is what to stop first, what to preserve, and in what order to recover…
Technote
WordPress know-how, from real work Technotes worth picking
11 articles· Security · Founders
Security Practical
Designing access when the team starts to grow
If everyone is an administrator, nobody is. Roles exist not to inconvenience people but to limit how far a mistake can travel.
Security Practical
Making repeated login attempts pointless
Rate limiting and moving the login URL are recommended in the same breath, but they do different jobs. Here is an honest account of what each one does…
Security Practical
SSL is on, so why is there no padlock?
The certificate is fine, yet the address bar shows a warning. The cause is usually one leftover http:// inside the page — and there is a set order…
Security Practical
How far a nearly-free backup really reaches
The question is not whether you have a backup but how many hours it takes to be back. A free setup goes a long way — as long…
Security Practical
What actually belongs in a privacy policy
Copy someone else's policy and you end up declaring data you never collect. There are really only five questions to answer.
Security Practical
A backup you have never restored is not a backup
Sites are lost with backups in place. Usually not because the backup was missing but because nobody ever checked the conditions for restoring it — an hour's work.
Security Practical
Setting up account recovery before you are locked out
Recovery paths cannot be created once you are already locked out. Domain, hosting and the site administrator — thirty minutes today covers all three.
Security Intro
What happens while you put off updates
A vulnerability sits quietly and then, one day, becomes public. A clock starts at that moment — and it stops when you press update.
Security Intro
What one properly made admin account prevents
The login screen is the most-knocked door on your site. Get the username, the password and the second factor right and most of that knocking becomes pointless.
Security Intro
Why sites with almost no visitors still get hacked
"We are too small to be a target" is the most common misreading. Most attempts are not chosen by a person but swept automatically — they never look…
Cited
Technotes worth reading next
Topics outside WordPress are collected on Dongji Communication Tech Insights, run by the same team. The summaries below are quoted from the originals; the titles link to them.
-
Working with AI
Writing a CLAUDE.md — teaching an AI coding assistant your project
AI coding tools such as Claude Code, Cursor and Copilot do better work the more precisely they know your project. Here is a structure and a set of principles that hold up.
-
Working with AI
Prompting an AI for UI design — drafting with Claude and GPT
Asking an AI to "make a nice button" gets you a disappointing button. Structured prompts that carry constraints, references and a defined role get you the design you meant.
-
Themes & plugins
SCSS from the ground up — variables through module structure
The core syntax of SCSS (Sass) and what it solves that plain CSS cannot: variables, nesting, mixins, @use and module structure — organised around patterns you can use immediately.
-
Themes & plugins
Design tokens and theme colour systems — brand identity in SCSS variables
How to turn a colour palette from a pile of hex codes into a system that means something — semantic token structure and SCSS variable patterns, from a real project.
-
Performance optimization
Designing a responsive typography system — the science of readability
Hard-coded pixel font sizes are over. Type scales, fluid sizing with clamp(), Korean webfont optimisation and line-height ratios — building typography that reads well on any screen.
-
Development workflow
From Figma to SCSS — a designer-developer handoff guide
Minimising what gets lost between a Figma file and the code: extracting tokens, naming components, keeping the spacing system in sync — the whole workflow, step by step.