Fetching WordPress posts in Next.js with the REST API
The simplest way to use WordPress as a headless CMS for Next.js: the built-in REST API, a server component and a sensible cache.
Blog
My pre-launch checklist for WordPress sites
Launch-day problems are rarely hard, just forgotten. This is the list I go through before a WordPress site goes live.
A WordPress security checklist for small sites
Most WordPress sites are compromised through the same few gaps. This is the checklist I run on small sites, roughly in order of impact.
Auto-deploying a WordPress theme from GitHub to cPanel
Push to main, and a minute later the theme is live, but only if the checks pass. Here's the pipeline behind this site, built for ordinary cPanel hosting.
Why my fixed mobile menu was 81px tall: backdrop-filter and containing blocks
The mobile menu on this site opened as an 81px strip. The cause was a frosted-glass header, and a CSS rule most of us never think about.
Building an SCF block with block.json, step by step
A complete walkthrough of a Secure Custom Fields block: block.json, a field group, a PHP render template and a preview that matches the front end.
Design tokens in plain CSS: a small system that scales
You don't need a token pipeline to get the benefits of design tokens. Two layers of CSS custom properties cover most sites.
Core Web Vitals for WordPress: fixing LCP, CLS and INP
Most slow WordPress sites fail Core Web Vitals for the same handful of reasons. Here's what each metric measures and the fixes that actually move it.
Dark mode with CSS custom properties and no flash on load
Dark mode is mostly a token problem. Swap a few CSS custom properties, respect the system setting, and stop the white flash before the first paint.