India’s DPDP Rules reach their second phase on 13 November 2026, and most website duties start on 13 May 2027. Here is a 5-point checklist for site owners: consent banner, blocking pixels until consent, the privacy notice, forms and the key dates.
List and download the pages of your own old website from the Internet Archive with the CDX API and a short Python script, and decide what is worth publishing again.
Expert mode only works if Apache recognises HTTPS. Behind a TLS-terminating proxy it does not, until you change two rewrite conditions. Here is the fix and the other pitfalls.
Refuse password logins over xmlrpc.php with a small must-use plugin, remove pingback, and see what the code means for Jetpack and other clients.
See which URL WordPress sends for WP-Cron, test the redirect, force https with a three-line filter, or switch to a system cron job.
New posts missing from your Rank Math sitemap? Here is the code path behind it in version 1.0.280, how to clear the stale cache, and a small must-use plugin workaround.
The Coolify dashboard stopped loading while the sites kept working. How to tell the proxy from the app, read the health check and log, and roll back a single container safely.
Upgrading 62 packages, including Docker and OpenSSH, on a VPS that hosts live sites: simulate first, run detached, expect a short SSH refusal, verify from outside, and plan the reboot.
WP-Cron only runs when someone visits. The exact 5-minute host cron job I use for a WordPress container, the CLI memory error I hit, and how I verified it before disabling WP-Cron.
A dated backup copy of wp-config.php in the web root was served over HTTPS. How I checked using only the status code, moved it, read the logs and what to rotate if secrets may have leaked.