/blog

Notes on WordPress, Elementor & security

Guides written from my own projects, on cleaning hacked sites, hardening WordPress, building with Elementor and speeding sites up.

Malware removal

7 signs your WordPress site has been hacked (and what to do first)

Spam redirects, Google warnings, admin users you never created — the most common signs of a hacked WordPress site, and the first steps to take before you fix it.

Read article

All articles

Cleaning up the WordPress database for a faster site

Revisions, expired transients, bloated autoloaded options and leftovers from deleted plugins slow WordPress down. What to clean, how to check it and what to leave alone.

Elementor

Oct 28, 20263 min read

Why your Elementor form emails aren't arriving (and how to fix it)

Contact form emails that land in spam or never arrive at all are usually a sending problem, not an Elementor one. How to fix it with SMTP, SPF, DKIM and DMARC.

Security

Oct 21, 20263 min read

WooCommerce security: protecting your shop and your customers

Shops hold orders, addresses and customer accounts, which makes them a bigger target. The checks I run on WooCommerce stores, from payments to card testing and skimmers.

WordPress

Oct 7, 20264 min read

Moving a WordPress site to a new host without downtime

A step-by-step plan for migrating WordPress to new hosting: preparing DNS, copying files and the database, testing before the switch and what to check afterwards.

Malware removal

Sep 30, 20264 min read

How I clean a hacked WordPress site, step by step

The exact process I follow to remove malware from WordPress — from backups and finding the entry point to cleaning files and the database, hardening and monitoring.

Security

Sep 23, 20263 min read

WordPress backups that actually work when you need them

What to back up, how often, where to keep the copies and how to test a restore, so a hack, a bad update or a server failure costs you minutes instead of days.