Get a quote

Notes worth keeping.

Thoughts, learnings, references, and things I want to remember across engineering, marketing technology, AI, and the web.

RSS feed

2026

16 notes

  1. Locking and Watching WordPress How I made the code of about 50 WordPress sites immutable with chattr, what that broke, two protections that had silently never run, and a quiet daily report.
  2. Spam That Outlives the Hack Why Google kept almost a million gambling spam URLs after the WordPress sites were clean, and how I found them in access logs and answered them with a 410 rule.
  3. When the Server Fell Over How a Facebook crawler flood took down every WordPress site on a shared server, why a full opcache looked like an attack, and the caps that keep sites apart.
  4. Two Servers, 50 Sites, One Bug How a WordPress Core exploit reached about 30 old WordPress sites on two RunCloud servers, what the attacker left, the cleanup, and the hardening I recommend.
  5. Cleaning Up a wp2shell Compromise How an unauthenticated WordPress Core exploit spread across seven sites on one RunCloud server, the signs it leaves, the cleanup I repeated, and how to stop it.
  6. How This Site Is Tracked How sultankautsar.com is tracked: a hand-built consent banner, Consent Mode V2 in advanced mode, Google Tag Manager, six GA4 events, and a strict CSP.
  7. Working with Opus 5.5 How I use Claude Opus 5.5 in Claude Code for client work, company projects, and personal tools: the habits, the review loop, and nine days of real sessions.
  8. A Circuit Breaker for Amazon SES SES Guard, a CloudFormation stack that watches Amazon SES for sending spikes and high bounce or complaint rates, stops sending, and says who was sending.
  9. Headless CMS for a Brand Site A headless CMS for a company brand site with WordPress and Next.js on RunCloud: Docker, Supervisor, on-demand revalidation, and scripted deploys with rollback.
  10. A Practical Deployment Pipeline How development, preview, and production environments work together, with build-once promotion, feature flags, and a rollback plan decided before you need it.
  11. Coding with GPT Astra My GPT-6 Astra workflow: high reasoning to plan, low reasoning to build, and a practical process for better specifications, code review, testing, and delivery.
  12. Working with GPT A personal reflection on using Codex and the GPT-5.6 family to plan, review, and implement software faster while handling demanding client and internal work.
  13. Google Tag Manager Clean up, speed up, and secure your Google Tag Manager container: GTM audits, server-side tagging, and a data layer the site and the container can both rely on.
  14. Google Ads Conversion Tracking Google Ads conversion tracking, including server-side setups, by a Google Tag Manager expert, so automated bidding learns from conversions that really happened.
  15. Consent Mode V2 Consent Mode V2 set up by a Google Tag Manager expert, so the site follows GDPR and other privacy rules and the data your decisions depend on still holds up.
  16. Google Analytics 4 Google Analytics 4 setup and full customer-journey tracking by a Google Tag Manager expert, built so the reports hold up when someone asks them a hard question.

2025

1 notes

  1. Building with Copilot A personal reflection on learning React Native with GitHub Copilot, shipping a mobile app for a sales team, and the switch from premium requests to AI credits.

Next step

Have a project in mind? Let's talk.

Tell me what you have and what you need. I'll usually reply within one working day with how I'd approach it.