Harden WordPress file permissions and disable PHP execution in uploads
Set correct Linux file permissions for WordPress directories and use .htaccess rules to block PHP execution in the uploads folder, stopping a common malware vector.
Improve WordPress SEO with XML sitemaps and robots.txt without a plugin
Generate an XML sitemap and tune robots.txt in WordPress entirely with custom PHP code — no plugin required.
Manage WordPress Multisite network sites programmatically with PHP
Create sites, switch database context and run cross-network operations in WordPress Multisite using get_sites and switch_to_blog.
Create a WordPress plugin settings page with the Settings API
Build a secure WordPress plugin options page using register_setting, add_settings_section and add_settings_field with sanitise callbacks.
WordPress Options API: add_option, get_option, update_option explained
Learn how to use the WordPress Options API to store and retrieve plugin settings with correct autoload and sanitisation.
How to set up WordPress Multisite on a single server
Enable WordPress Multisite for a network of sites with shared plugins and themes using wp-config.php and .htaccess setup.
Disable file editing in WordPress admin dashboard
WordPress ships with a built-in code editor under Appearance → Theme File Editor and Plugins → Plugin File Editor that lets administrators edit PHP, JavaScript, and CSS files directly from the browser. This feature was designed for the era when WordPress was primarily a blogging tool and hosting environments made FTP the standard file management…
Permanently Add a Private SSH Key So It Persists After Reboot
After adding an SSH key with ssh-add you might notice that after a system reboot you need to add it again. On most Linux distributions the SSH agent does not persist keys across sessions by default. The fix is to configure your SSH client to load the key automatically by adding an entry to the…