<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Notes - Sultan Kautsar</title><description>Thoughts, learnings, references, and things I want to remember across engineering, marketing technology, AI, and the web.</description><link>https://studio.sultankautsar.com/note/</link><language>en</language><atom:link href="https://studio.sultankautsar.com/note/feed.xml" rel="self" type="application/rss+xml"/><item><title>Locking and Watching WordPress</title><link>https://studio.sultankautsar.com/note/lockdown</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/lockdown</guid><description>How I made the code of about 50 WordPress sites immutable with chattr, what that broke, two protections that had silently never run, and a quiet daily report.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Spam That Outlives the Hack</title><link>https://studio.sultankautsar.com/note/spam</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/spam</guid><description>Why Google kept almost a million gambling spam URLs after the WordPress sites were clean, and how I found them in access logs and answered them with a 410 rule.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate></item><item><title>When the Server Fell Over</title><link>https://studio.sultankautsar.com/note/overload</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/overload</guid><description>How a Facebook crawler flood took down every WordPress site on a shared server, why a full opcache looked like an attack, and the caps that keep sites apart.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Two Servers, 50 Sites, One Bug</title><link>https://studio.sultankautsar.com/note/breach</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/breach</guid><description>How a WordPress Core exploit reached about 30 old WordPress sites on two RunCloud servers, what the attacker left, the cleanup, and the hardening I recommend.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Cleaning Up a wp2shell Compromise</title><link>https://studio.sultankautsar.com/note/wp2shell</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/wp2shell</guid><description>How an unauthenticated WordPress Core exploit spread across seven sites on one RunCloud server, the signs it leaves, the cleanup I repeated, and how to stop it.</description><pubDate>Wed, 07 Oct 2026 00:00:00 GMT</pubDate></item><item><title>How This Site Is Tracked</title><link>https://studio.sultankautsar.com/note/tracking</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/tracking</guid><description>How sultankautsar.com is tracked: a hand-built consent banner, Consent Mode V2 in advanced mode, Google Tag Manager, six GA4 events, and a strict CSP.</description><pubDate>Sat, 03 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Working with Opus 5.5</title><link>https://studio.sultankautsar.com/note/opus</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/opus</guid><description>How I use Claude Opus 5.5 in Claude Code for client work, company projects, and personal tools: the habits, the review loop, and nine days of real sessions.</description><pubDate>Sat, 03 Oct 2026 00:00:00 GMT</pubDate></item><item><title>A Circuit Breaker for Amazon SES</title><link>https://studio.sultankautsar.com/note/sesguard</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/sesguard</guid><description>SES Guard, a CloudFormation stack that watches Amazon SES for sending spikes and high bounce or complaint rates, stops sending, and says who was sending.</description><pubDate>Thu, 01 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Headless CMS for a Brand Site</title><link>https://studio.sultankautsar.com/note/headless</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/headless</guid><description>A headless CMS for a company brand site with WordPress and Next.js on RunCloud: Docker, Supervisor, on-demand revalidation, and scripted deploys with rollback.</description><pubDate>Mon, 28 Sep 2026 00:00:00 GMT</pubDate></item><item><title>A Practical Deployment Pipeline</title><link>https://studio.sultankautsar.com/note/pipeline</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/pipeline</guid><description>How development, preview, and production environments work together, with build-once promotion, feature flags, and a rollback plan decided before you need it.</description><pubDate>Wed, 16 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Coding with GPT Astra</title><link>https://studio.sultankautsar.com/note/astra</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/astra</guid><description>My GPT-6 Astra workflow: high reasoning to plan, low reasoning to build, and a practical process for better specifications, code review, testing, and delivery.</description><pubDate>Mon, 07 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Working with GPT</title><link>https://studio.sultankautsar.com/note/gpt</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/gpt</guid><description>A personal reflection on using Codex and the GPT-5.6 family to plan, review, and implement software faster while handling demanding client and internal work.</description><pubDate>Sun, 23 Aug 2026 00:00:00 GMT</pubDate></item><item><title>Google Tag Manager</title><link>https://studio.sultankautsar.com/note/tagmanager</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/tagmanager</guid><description>Clean up, speed up, and secure your Google Tag Manager container: GTM audits, server-side tagging, and a data layer the site and the container can both rely on.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Google Ads Conversion Tracking</title><link>https://studio.sultankautsar.com/note/conversion</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/conversion</guid><description>Google Ads conversion tracking, including server-side setups, by a Google Tag Manager expert, so automated bidding learns from conversions that really happened.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Consent Mode V2</title><link>https://studio.sultankautsar.com/note/consent</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/consent</guid><description>Consent Mode V2 set up by a Google Tag Manager expert, so the site follows GDPR and other privacy rules and the data your decisions depend on still holds up.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Google Analytics 4</title><link>https://studio.sultankautsar.com/note/analytics</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/analytics</guid><description>Google Analytics 4 setup and full customer-journey tracking by a Google Tag Manager expert, built so the reports hold up when someone asks them a hard question.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Building with Copilot</title><link>https://studio.sultankautsar.com/note/copilot</link><guid isPermaLink="true">https://studio.sultankautsar.com/note/copilot</guid><description>A personal reflection on learning React Native with GitHub Copilot, shipping a mobile app for a sales team, and the switch from premium requests to AI credits.</description><pubDate>Tue, 30 Dec 2025 00:00:00 GMT</pubDate></item></channel></rss>