PHP, Wordpress, Magento and Shopify Web Developer in Northern Ireland
—
Critical PHP vulnerabilities: A guide to PHP2Shell
Two critical remote code execution vulnerabilities in PHP, collectively called PHP2Shell, have exposed an estimated 22.6 million web servers worldwide to potential compromise. This guide explains what clients need to do now, how hosting choices matter for security responsiveness, and what to prioritise for long-term resilience. What happened On 21 October 2026, the PHP Foundation released emergency security updates addressing…
—
Content security policy implementation from generator to production
Why content security policy matters more than you think Content Security Policy (CSP) is one of those security headers that sounds straightforward until you try implementing it on a live site. Suddenly your scripts stop loading, your images fail to render, and your CSS appears broken. But getting it right prevents XSS attacks, stops malicious code injection, and significantly reduces…
—
Tech Support: Fixing a compromised WordPress site
Most WordPress compromises stay hidden for weeks. No defaced homepage, no ransom note. More on how to spot a compromised WordPress site Technical support for suspected WordPress hacks Any malicious infection leaves traces. Here's how to find them systematically using the command line. Core file integrity checks Start by verifying your WordPress core hasn't been tampered with. Download a fresh…
—
How to spot a compromised WordPress site before it's too late
Most WordPress compromises stay hidden for weeks. No defaced homepage, no ransom note. Technical support and fixing a compromised WordPress site Often here's no dramatic defacement, no ransom note, no angry emails from customers. Instead, the compromise sits quietly in the background, harvesting credit card details, sending spam, or quietly redirecting your visitors somewhere you really don't want them to…
—
Modern WordPress security: why management beats manual hardening
Discover why the latest WordPress updates and tools like Wordfence make active management more effective than old-school hardening techniques. A few years ago, I wrote about Hardening WordPress against hacking. Back then, the conversation was dominated by manual.htaccess tweaks, disabling XML-RPC, and scrambling file permissions. While those steps still have their place, the threat landscape and the WordPress core itself…
Hello, I'm Keith.
I'm a Belfast, Northern Ireland–based senior web developer and technical lead delivering robust, user‑centred websites and web applications.
I work with PHP, WordPress and other platforms helping organisations turn complex requirements into elegant, successful and maintainable solutions.