Free certificates went GA this month. Automating issuance and renewal, the rate limits that catch staging first, and the monitoring that has to outlive the automation.
XMLHttpRequest sends cookies to the same origin by default. fetch does not, so a session-authenticated endpoint that worked with jQuery returns 401 after the migration and looks like…
Session settings had to be applied with ini_set() before session_start(), in the right order, from somewhere that ran early enough — which is why so many applications have…
A default wp-config.php leaves the file editor enabled, revisions unlimited and debugging output aimed at the browser. Four constants close most of that, and they belong in the…
The two families are constantly swapped because both “clean up a string”. Sanitising decides what is allowed to be stored; escaping decides how it is rendered safely in…
Email and URL validation by regular expression is a well-known way to reject valid input. The correct pattern for an address is famously unreadable, and the shortened versions…