https://utsavkarki.com.np/blog.html Web development, DevOps and freelancing notes by Utsav Karki. en-ca https://utsavkarki.com.np/blog/php2shell-critical-php-vulnerabilities.html https://utsavkarki.com.np/blog/php2shell-critical-php-vulnerabilities.html Sun, 01 Nov 2026 00:00:00 +0000 Security CVE-2026-109618 and CVE-2026-109619 let attackers run code on PHP servers without logging in. What the two flaws are, why they matter for most of the web, and the exact steps to patch, mitigate and check for compromise. https://utsavkarki.com.np/blog/nepal-to-newfoundland.html https://utsavkarki.com.np/blog/nepal-to-newfoundland.html Wed, 28 Oct 2026 00:00:00 +0000 Career What changed when I moved from Nepal to St. John's, Newfoundland to study an MSc in Computer Science at MUN while working at Verisult and keeping my freelance clients. https://utsavkarki.com.np/blog/verisult-college-wordpress.html https://utsavkarki.com.np/blog/verisult-college-wordpress.html Tue, 20 Oct 2026 00:00:00 +0000 Case Study How I approached the verisultcollege.ca build at Verisult (Tailwind CSS, GSAP, custom WordPress theme): information architecture for programs and admissions, performance, accessibility, SEO and a launch checklist. https://utsavkarki.com.np/blog/laravel-performance-optimization.html https://utsavkarki.com.np/blog/laravel-performance-optimization.html Fri, 05 Jun 2026 00:00:00 +0000 Laravel A practical guide to optimizing Laravel applications: database indexing, eager loading, caching strategies and deployment best practices that took a dashboard from 5s to 200ms. https://utsavkarki.com.np/blog/vps-server-setup.html https://utsavkarki.com.np/blog/vps-server-setup.html Mon, 01 Jun 2026 00:00:00 +0000 DevOps Step-by-step guide to a production-ready Ubuntu VPS for PHP sites: users and SSH hardening, firewall, Nginx, PHP-FPM, MariaDB, free SSL with Certbot, and backups. https://utsavkarki.com.np/blog/freelancing-uk-clients.html https://utsavkarki.com.np/blog/freelancing-uk-clients.html Thu, 28 May 2026 00:00:00 +0000 Freelancing Practical lessons from years of freelancing for UK businesses, first from Nepal and now from St. John's, Canada: communication, time zones, scoping, invoicing and long-term relationships. https://utsavkarki.com.np/blog/wordpress-security-hardening.html https://utsavkarki.com.np/blog/wordpress-security-hardening.html Wed, 20 May 2026 00:00:00 +0000 WordPress A practical WordPress security checklist: updates, admin accounts and 2FA, file permissions, wp-config hardening, Nginx and .htaccess rules, a WAF, backups and malware monitoring. https://utsavkarki.com.np/blog/nopcommerce-development.html https://utsavkarki.com.np/blog/nopcommerce-development.html Fri, 15 May 2026 00:00:00 +0000 E-Commerce A practical guide to NopCommerce development: architecture, themes and Razor views, writing plugins, payment and email integrations, search, and deploying to IIS or Linux. https://utsavkarki.com.np/blog/python-automation-scripts.html https://utsavkarki.com.np/blog/python-automation-scripts.html Sun, 10 May 2026 00:00:00 +0000 Python Useful Python automation scripts for web developers: broken link checking, uptime alerts, image optimisation, API-to-spreadsheet syncs and scheduling them with cron.