Blog
Practical articles by Isuru Ratnayake on WordPress, WooCommerce, PHP upgrades, website security, payments and hosting, from 15+ years of hands-on client work.
Skip the Node 22, pnpm and Wrangler setup. Run Cloudflare's open-source cloudflare-os locally with one docker run command, plus the wrangler dev fix.
How I built an API-based WooCommerce checkout with PCI Vault and Trust Payments 3DS2, where the merchant's server never touches a single card number.
Keep your existing app on the main domain and serve WordPress at /blog via Cloudflare Workers or Nginx, without broken AJAX, redirects or redirect loops.
Phantom Shell creates hidden admins, spreads to every site on a server and steals database passwords. How it works, how to detect it and how to clean up.
Squarespace has no backend access, so Zapier-based Meta CAPI setups fall short. Here's the server-side GTM + Stape setup that fixed a client's ad tracking.
A payment scheduler was running three days early on a live system I didn't write. Here's the 7-step method I used to find and fix the bug safely.
Add custom fields to the WooCommerce block checkout with the Additional Checkout Fields API. Register, validate and read values, with working PHP examples.