Practical write-ups on WordPress, Laravel, servers and freelancing, from client projects and life as a developer in St. John's.
CVE-2026-109618 and CVE-2026-109619 let attackers run code on PHP servers without logging in. What the two flaws are, why they matter for most of the web, and the exact steps to patch, mitigate and check for compromise.
What changed when I moved from Nepal to St. John's, Newfoundland to study an MSc in Computer Science at MUN while working at Verisult and keeping my freelance clients.
Read articleHow I approached the verisultcollege.ca build at Verisult (Tailwind CSS, GSAP, custom WordPress theme): information architecture for programs and admissions, performance, accessibility, SEO and a launch checklist.
Read articleA practical guide to optimizing Laravel applications: database indexing, eager loading, caching strategies and deployment best practices that took a dashboard from 5s to 200ms.
Read articleStep-by-step guide to a production-ready Ubuntu VPS for PHP sites: users and SSH hardening, firewall, Nginx, PHP-FPM, MariaDB, free SSL with Certbot, and backups.
Read articlePractical lessons from years of freelancing for UK businesses, first from Nepal and now from St. John's, Canada: communication, time zones, scoping, invoicing and long-term relationships.
Read articleA practical WordPress security checklist: updates, admin accounts and 2FA, file permissions, wp-config hardening, Nginx and .htaccess rules, a WAF, backups and malware monitoring.
Read articleA practical guide to NopCommerce development: architecture, themes and Razor views, writing plugins, payment and email integrations, search, and deploying to IIS or Linux.
Read articleUseful Python automation scripts for web developers: broken link checking, uptime alerts, image optimisation, API-to-spreadsheet syncs and scheduling them with cron.
Read article
