Not an expert. Probably wrong.

Notes on web infrastructure, security and performance — some learned the hard way.

I grew up with C64, VHS and Transformers. Curiosity for technology eventually shaped my career, and today I work in online retail.

  • Innovation
  • Web Security
  • Performance
  • Privacy

01 / Writing

Latest posts

Browse the archive
  1. 2018

    Install and update translations in WordPress with Composer

    Using Composer is a great way of organizing your WordPress project, with WordPress itself, plugins and themes declared as dependencies. However, an issue I’ve often seen is how you install translation files and keep them updated.

  2. 2018

    Wildcard certificate from Let’s Encrypt with CloudFlare DNS

    If you’re using CloudFlare to host your DNS, there is a plugin for the official Let’s Encrypt client Certbot you can use to easily acquire and renew wildcard certificates from Let’s Encrypt.

  3. 2018

    Debug and profile your WordPress sites with Xdebug in Local by Flywheel (using PhpStorm)

    This article is not an introduction to neither Xdebug, Local by Flywheel nor PhpStorm, but shows you how you can get started with debugging and profiling your WordPress sites in PhpStorm when using Local by Flywheel as a local development environment. You should already know what Xdebug is before reading this article. This is how you get started with Xdebug in Local by Flywheel.{{ double-space-with-newline }}

  4. 2018

    Gravity Forms personal data exporter and eraser

    When WordPress 4.9.6 launched on May 17, 2018 it came with new tools for exporting and erasing personal data that you may have collected (you know, GDPR and all). But Gravity Forms as of version 2.3.2 doesn’t integrate with these tools. Fortunately, it is really easy to write your own exporters and erasers.

  5. 2018

    How to mitigate CVE-2018-6389 – the load-scripts.php DoS “attack” in WordPress

    A little sensationalist written blog post by Barak Tawily claims that WordPress is vulnerable to a DoS attack because of the load-scripts.php file which concatenates JavaScript files on the fly.

  6. 2018

    HTTP/2 Push WordPress Assets to First-Time Visitors

    With HTTP/2 push you can effectively send a web page’s assets to the client before the client even knows about them. Here’s how you can HTTP/2 push WordPress assets to your first-time visitors.{{ double-space-with-newline }}

  7. 2018

    Another day, another “WordPress security vulnerability”

    OMFG, BREAKING NEWS: Thousands of WordPress sites affected by some vulnerability.{{ double-space-with-newline }}

  8. 2018

    Welcome to WordCamp Oslo 2018

    On March 2–4 2018, Friday through Sunday, there will be a great chance to meet WordPressers at the conference WordCamp Oslo 2018.

  9. 2018

    Cut 90% of your WordPress translations loading time

    WordPress translations are compiled from human-readable PO-files into machine optimized MO-files, but still takes a lot of overhead to load. If you only could cache the translation load time, you would save a lot of page load time. We can easily cut 90% of our WordPress translations loading time.

  10. 2018

    Git Pre-commit Hook for WordPress projects

    Wouldn’t it be cool if you, in your PHP project could define a package that makes sure that everybody who even tries to commit code is forced to follow the project’s defined coding standards? Yeah, me too. So I created this Composer plugin you can use in your projects.