Introduction This article is a comprehensive, practical guide to extending WPGraphQL with custom types and resolvers in PHP. It covers the basic building blocks, step-by-step code examples, patterns for organizing code in a plugin or theme, security and performance considerations, testing and debugging tips, and advanced topics such as mutations and external data sources. All […]
Overview This tutorial explains, in exhaustive detail, how to consume WPGraphQL (the GraphQL endpoint for WordPress) from JavaScript running on the frontend. It covers discovery and debugging, building queries and mutations, using the browser fetch API, modern GraphQL clients (graphql-request, Apollo Client, urql), authentication approaches, file uploads, CORS and security considerations, SSR/CSR patterns (Next.js/vanilla), caching […]
Overview This is a comprehensive, production-ready tutorial on how to index WordPress content into Algolia or Meilisearch using PHP. It covers prerequisites, installation, indexing strategies (real-time and bulk), mapping and sanitizing content, attachments and custom fields, index settings (searchable attributes, facets, ranking, synonyms), partial updates, deletion, reindexing, performance considerations, security, error handling and examples you […]
Overview This tutorial shows how to build a custom WordPress REST API endpoint that performs relevance-based searches and supports synonym expansion. It covers design decisions, security, indexing, a practical PHP implementation using the WordPress REST API, how to create MySQL fulltext indexes, query expansion for synonyms and boosting, pagination and caching, and thoughts on scaling […]
Overview This article is a complete, detailed tutorial on building a granular permissions system in WordPress using metacapabilities. It explains the concepts behind capabilities and metacapabilities, shows how to register custom capabilities, implements a robust map_meta_cap callback for per-object access control, integrates with the REST API and admin UI, discusses performance and security considerations, and […]
Introduction This article explains, in exhaustive detail, how to intercept and customize the WordPress user registration flow using PHP. It covers the built-in hooks and filters you can use, patterns to extend the default registration form, how to replace the default flow with a custom registration page, security and sanitization best practices, examples for validation, […]
Overview This article explains, step by step, how to build secure signed links for custom password-reset flows in WordPress. The approach combines an HMAC signature (so links cannot be forged) with a one-time random token stored (hashed) in usermeta (so a reset link can be single-use). It also covers creating the request page, the reset […]
Overview This article shows a complete, production-ready approach to protecting private WordPress uploads by using signed URLs and rewrite rules that route requests to a PHP verifier/streamer. The pattern is simple: Keep private files inaccessible via direct public URLs (either outside the webroot or in a protected folder). Generate time-limited signed URLs (HMAC-based) or signed […]
Why use Web Workers in the WordPress admin? Modern admin pages often need to process large datasets, parse uploaded files, run expensive calculations, or do client-side search/sort operations. Doing that on the main thread blocks the UI, causing the admin to freeze or become unresponsive. Web Workers let you run JavaScript on background threads so […]
Overview: why batching long tasks matters Many WordPress tasks (migrating data, regenerating images, exporting large datasets, bulk meta updates) can exceed PHP max execution time or memory limits when executed in a single request. Running them in smaller batches through the REST API and a JavaScript runner avoids timeouts, gives progress feedback to users, and […]
