Frontend and backend web development from someone who's been writing PHP since the early 2000s. Frameworks, performance, security, and the decisions that matter at scale.
Cybersecurity
XSS injects malicious JavaScript into web pages served to other users — stealing sessions, redirecting to phishing pages, or silently exfiltrating data. It's been in the OWASP Top 10 since 2003. Here's every type, how each one works, and how to actually fix them.
Cybersecurity
In 2008, attackers used SQL injection to breach Heartland Payment Systems, a payment processing company. They stole 130 million credit and debit card numbers. The breach cost Heartland over $140 million in settlements and fines. The CEO described it as an "international cybercrime ring." The technical execution was
Systems Administration
A web server accepts HTTP requests and returns responses. Apache has been doing this since 1995. Nginx rebuilt the model in 2004 and took over the cloud. Here's how they work, how they differ, and how to pick between them.
Cybersecurity
Encryption transforms readable data into unreadable ciphertext that only someone with the right key can reverse. It's what makes HTTPS, messaging apps, banking, and password storage work. Here's how it actually functions.
Cybersecurity
Cybersecurity is the discipline of protecting systems, networks, and data from attack, damage, and unauthorized access. Here's what it actually covers, how attacks work, how defense works, and why every developer needs to understand it.
Self Hosting
I exclusively used WordPress somewhere between 2008 to 2019 – if not earlier than that for me. At least eleven years. That's a good long time to dedicate to a platform. And honestly? For most of that time, I thought WordPress was fine. I was managing my blog, publishing
Web Development
Tutorials that show you how to build an API in 50 lines of code are lying to you. This is what a production TypeScript API actually looks like — authentication, validation, error handling, rate limiting, database connection pooling, structured logging, and a test suite. All of it, from scratch.
Web Development
An API is a contract between two pieces of software. One side defines what requests it accepts and what responses it sends. The other side follows that contract to get work done. Every app on your phone, every website pulling live data, and every service talking to another service uses APIs.
Web Development
MySQL runs WordPress, which runs 43% of the web. It runs Facebook's original backend, YouTube, and GitHub. It is also a database with genuine quirks that bite people who do not know about them. Here is the full picture.
Software Development
A database is organized data with a system for storing, retrieving, and modifying it reliably. Every application you have ever used depends on one. Here is how they actually work, what the different types do, and what separates a well-designed schema from one that will wreck you at scale.
Web Development
WebAssembly started as a way to run C++ in a browser without recompiling to JavaScript. Figma, Google Earth, AutoCAD, and video codecs run in WASM. The server-side ecosystem is growing fast enough that cloud providers are building WASM runtimes into their infrastructure. Here is how it works.
Web Development
Flask started as an April Fools joke and became one of the most widely deployed Python web frameworks in production. Here is how it works, what makes it different from Django, and what a real production Flask API looks like.