Every Yes Was Reasonable. The Site Is Still a Mess.
Somebody asked for an orange button on one page. Three years later there are nineteen button styles and a redesign quote nobody expected. How drift happens, what it costs, and...
Read Article →Your Bot Blocking Might Be Blocking Google
Somebody asked whether anything could be done about AI companies training on your content, and a switch got flipped. Here is how to tell whether that switch is also blocking...
Read Article →Your Donation Page Can Record a Payment That Never Arrived
Your finance director lines the website donation report up against the processor settlement and they do not match. Here is how a donation page ends up recording a payment that...
Read Article →Drupal Published a Day of Advisories. Most of Them Were for One Module.
Membership applications, event registration, abstract submissions, the ethics form. On most association Drupal sites that is all one module, and on September 23 it had a bad day.
Read Article →The Update Your Theme Needs May Not Be Offered to You
Your site runs a commercial theme an agency bought in 2019. The dashboard says no updates available, which is not the same thing as up to date. Here is how...
Read Article →We Told You to Install 7.1.1. By Then 7.1.2 Was Already Out.
The Click2Shell flaw needed an administrator to click a link. This one needs nobody. Two WordPress security releases in five days, and what that cadence means for a monthly patch...
Read Article →Which of Your Forms Lets a Stranger Put a File on Your Server?
Your scholarship application asks for a transcript and your conference form asks for a CV. Both let a stranger put a file on your server. Here is a twenty-minute triage...
Read Article →PHP 8.2 Goes End of Life on December 31
PHP 8.2 stops receiving security fixes on December 31, 2026. If your association site was rebuilt in early 2023, this is probably the version it runs. What is not defensible...
Read Article →Four Deadlines Are Already Written Into Your 2027 Website Budget
The budget template arrives the week after Labor Day and your website is one row on it. Four dated deadlines are already written into 2027. Here is which ones actually...
Read Article →The Exploit Needs an Administrator. You Have More Than You Think.
The flaw cannot be triggered by a visitor, a member, or an Editor. It needs an administrator, signed in, to open a link. So the length of your administrator list...
Read Article →