Articles from our team on software engineering, product strategy, and building great teams.
Advertisement
JavascriptHow Axios timeouts really behave — why timeout does not cover connection time, cancelling with AbortController, retry with backoff, interceptors, and an honest comparison with fetch.
JavascriptA practical guide to regular expressions plus honest email validation — what a simple pattern catches, why RFC-compliant regexes are a trap, the ReDoS vulnerability lurking in clever patterns, and the only check that actually proves an address works.
JavascriptLexical scope decides which variables your code can see, based on where you wrote it. Understand the scope chain, closures, the temporal dead zone, and why `this` is the one thing that does not follow these rules.
JavascriptHow map, filter and reduce actually work, with real-world examples beyond doubling numbers — chaining, grouping with reduce, the empty-array crash, and when a plain for...of loop is the better choice.
JavascriptA complete comparison of var, let and const — scope, hoisting, the temporal dead zone, redeclaration, the global object, and why const does not mean immutable.
WordPressFilter WooCommerce shop archives with pre_get_posts using the right conditional tags, and set product visibility the modern way — the product_visibility taxonomy replaced _visibility postmeta in WooCommerce 3.0.
HTMLStyle checkboxes and radio buttons with modern CSS — accent-color for one-line theming, full custom control with appearance:none, indeterminate and focus states, and the accessibility mistakes that break keyboard users.
JavascriptRead the state of checkbox and radio groups without jQuery — counting selections, getting all values, select-all with indeterminate, mutually exclusive groups, and safely storing JSON in data attributes.
WordPressTrack and display product view counts in WooCommerce using hooks — with a counter that does not grow an unbounded string in postmeta, survives page caching, avoids storing IP addresses, and uses current WooCommerce APIs.
MySqlEvery MySQL join type with worked examples — plus how to emulate FULL OUTER JOIN, which MySQL does not support, the WHERE clause that silently turns a LEFT JOIN into an INNER JOIN, and anti-joins for finding unmatched rows.
ApacheA practical guide to HTTPS on Apache in 2026 — free automated certificates with Let's Encrypt, installing a purchased .crt with its intermediate chain, the certificate order that causes most errors, and a self-signed cert for local development.
HTMLAdd Facebook Share, Page and Comments plugins to a website today — which ones no longer need the SDK, why the Like button was retired, the App ID and domain setup that is now mandatory, and the privacy cost of embedding Facebook.
PHPAngularJS reached end of life in December 2021 and no longer receives security patches. Here is the same comments-form pattern built with fetch and a JSON PHP API — plus what to do if you are maintaining an existing AngularJS app.
WordPressBuild a custom WordPress widget by extending WP_Widget — registering sidebars, escaping form fields correctly, caching output, and dealing with the block-based widget editor introduced in WordPress 5.8.
PHPImplement reCAPTCHA properly in PHP — server-side token verification, handling v3 scores, why the checkbox alone protects nothing, plus privacy-friendly alternatives like Cloudflare Turnstile and hCaptcha.
JavascriptPoll a server and update part of a page using fetch and recursive setTimeout — avoiding the overlapping requests setInterval causes, pausing on hidden tabs, backing off on errors, and knowing when to use SSE instead.
WordPressPut a cart icon with item count and total in your WordPress header using current WooCommerce APIs — including the AJAX fragment refresh that makes the count update without a page reload, and why the old global $woocommerce code is broken.
ApacheA complete WAMP installation guide for Windows — the Visual C++ redistributables almost everyone misses, fixing the orange icon and port 80 conflicts, creating your first project and database, plus when XAMPP, Laragon or WSL2 is the better choice.
PHPImplement Login with Facebook the current way — the Authorization Code flow with a state parameter, server-side token exchange, storing users safely, and the account-linking rule that stops Facebook login becoming account takeover.
PHPSet, read, update and delete cookies in PHP using the modern array syntax — with SameSite, Secure and HttpOnly explained, the __Host- prefix, signing values against tampering, and where third-party cookie deprecation leaves you.
JavascriptGet a user's location and draw a route with the Google Maps JavaScript API — using the modern importLibrary loader, the API key and billing Google now requires, HTTPS-only geolocation, and honest handling of permission denial.
CodeIgniterGet started with CodeIgniter 4 — Composer install, the public/ webroot that fixed CI3's biggest security weakness, controllers, routes, models and views, plus a migration table for anyone still on CodeIgniter 3.
HTMLHow to build your own responsive design testing tool with iframes and device presets — including the X-Frame-Options limitation nobody warns you about, and when browser DevTools is the better answer.
PHPHow PHP sessions really work — preventing session fixation and hijacking, the cookie settings that matter, why session_write_close() fixes slow concurrent requests, and the three-step logout most tutorials get wrong.
PHPImplement social login correctly using the Authorization Code flow with PKCE — the state parameter that prevents CSRF, why the implicit flow is deprecated, popup vs redirect handling, and the account-linking mistake that lets attackers take over accounts.
ApacheThe .htaccess rules you actually need — clean URLs, 301 redirects, HTTPS and www canonicalisation, custom error pages, caching and security headers — with the flag meanings and ordering gotchas that make rewrites work.
CodeIgniterBuild a multilingual CodeIgniter 4 site the way search engines can index — locale in the URL rather than the session, safe language switching without open redirects, hreflang tags, and translation files with placeholders and plurals.
HTMLBuild fast, private social sharing buttons using plain links and the Web Share API — no Facebook SDK, no tracking, no jQuery. Includes current share URLs for every major platform and the Open Graph tags that control the preview.
PHPIntegrate Stripe with PHP the way it works today — Checkout Sessions and Payment Intents, why raw card fields put you in PCI SAQ D scope, handling Strong Customer Authentication, and confirming payments with webhooks rather than the redirect.
MySqlStream MySQL query results to CSV or a real Excel file in PHP using fputcsv — with the UTF-8 BOM Excel needs, protection against CSV formula injection, and memory-safe exports for large tables.
MySqlBuild a Load More button with the Fetch API and PHP — plus keyset pagination, which stays fast at page 5,000 where LIMIT/OFFSET collapses, and the duplicate-row bug OFFSET causes on live data.
PHPRaise PHP's upload limit properly — which method works for mod_php, PHP-FPM and CGI, the five directives that all have to agree, the nginx setting nobody mentions, and why ini_set() can never change upload_max_filesize.
WordPressEvery WooCommerce shortcode that still works, the ones that were removed, and how the block-based Cart and Checkout changed things — with the full attribute list for the [products] shortcode.
PHPIPN is deprecated. Here is how to receive and verify PayPal payment notifications with Webhooks in PHP — signature verification, idempotency, sandbox testing, and why you must never trust the browser redirect to confirm a payment.
JavascriptPreview images before upload using FileReader or the faster URL.createObjectURL — with multi-file previews, drag and drop, client-side resizing, and the memory leak most tutorials leave in.
MySqlA production-ready CSV and XLSX import for PHP — prepared statements, batched inserts, streaming for large files, upload handling that is not a security hole, and per-row error reporting instead of silent failures.
MySqlA YouTube-style rating system done properly — one atomic upsert instead of six queries, a unique constraint that makes double-voting impossible, optimistic UI with fetch, and why identifying voters by IP address does not work.
PHPBuild an RSS 2.0 feed in PHP that actually validates — correct XML escaping so one ampersand cannot break the whole document, stable GUIDs, the self-referencing Atom link validators require, and conditional GET support.
JavascriptHow to send browser notifications from a web application using the Notification API and Push API — permission handling that does not get you blocked, service worker notifications, and the iOS caveat most guides miss.
MySqlBuild cascading select menus backed by MySQL — returning JSON instead of HTML, cancelling stale requests so slow responses cannot overwrite fresh ones, and a schema that will not break at 127 countries.
PHPIP geolocation in PHP done properly — why unserialize() on a remote response is a remote code execution risk, how to get the real client IP behind a proxy or CDN, plus caching, accuracy limits and GDPR.
MySqlBuild an A–Z index page from MySQL with a single query instead of one per letter — plus collation choices that decide how accents and case sort, natural ordering for names with numbers, and the index that keeps it fast.
PHPBuild a registration and login form using native HTML validation and the Constraint Validation API, with a PHP backend that hashes passwords correctly, prevents user enumeration, and defends against CSRF and session fixation.
Join 500+ engineering leaders who get our monthly insights on building great software.
