While your site is running, things change. A content editor tweaks a configuration setting. A security vulnerability surfaces in a dependency. A production fix gets applied directly instead of going through the normal release process.
Blog
🕑May 22, 2026 🖋John Locke
💬0
The Night the Internet Tried to Kill Your Website
May 2026
My name doesn't matter. Call me the op. I run a small shop — we keep websites alive, patch the holes before the wrong people find them, and make sure that when something goes sideways, there's always a way back. It's not glamorous work. But this spring? This spring was something else.
🕑May 19, 2026 🖋John Locke
💬0
Your Website Will Be Attacked. Here's How We Make Sure You Survive It.
The question used to be whether your website would face a serious security threat. That question has been answered. The question now is whether you'll be ready when it happens — and whether you can recover cleanly when something gets through.
🕑May 18, 2026 🖋John Locke
💬0
The Rules Have Changed: Security in the Age of AI-Assisted Attacks
Security is getting dramatically harder and more expensive. AI is simultaneously driving an explosion in vulnerability discovery and weaponizing the exploits that follow. The question for every organization with anything online is no longer whether to invest in resilience — it's whether that investment is already in place before the next incident arrives.
🕑May 06, 2026 🖋John Locke
💬0
When Your WordPress Site Launches Into a Performance Crisis
A real-world post-mortem on 15 performance issues we fixed in 4 days — and what every WordPress site owner should know before going live.
🕑Apr 21, 2026 🖋John Locke
💬0
When Views meets Drupal Canvas -- getting dynamic content into your Canvas page
From early days, "views" has been the killer feature of Drupal. Views is a powerful querying tool built into Drupal that allows dynamic lists and displays of content to be created without writing custom code.
🕑Apr 15, 2026 🖋John Locke
💬0
Ask Freelock: Why Is My Site Still Getting Hammered by Bots — Even on a Major Hosting Platform?
We recently heard from a former client who had moved their site to a major managed hosting platform, hoping for more stability and better protection.
🕑Nov 20, 2025 🖋John Locke
💬0
Vibe-coding versus Open Source - Security over the long haul
Vibe-coding is all the rage today. Who needs a developer when you can get an AI to develop an application for you? There are scads of application development tools now that promise to create that app you always wanted -- and surprisingly, these often work!
🕑Sep 22, 2025 🖋John Locke
💬0
Use Drupal Flake for PHPUnit testing
Drupal Flake is a new way of doing local Drupal development (running a self-contained Drupal site on your desktop or laptop).
🕑Sep 22, 2025 🖋John Locke
💬0
Use Group Purl on your Group site!
One big missing part of the Group module is setting up friendly URLs that contain the group in the path for group content. You can't set this up in Pathauto -- the tokens are too limited to handle this correctly.
🕑Sep 22, 2025 🖋John Locke
💬0
Easy unit testing with Drupal Flake and AI - Group PURL, a case study
AI does not replace system engineering. Stories abound about AI running amok, deleting production databases, exposing private data, failing to deliver on promises.
🕑Sep 19, 2025 🖋John Locke
💬0
Upcoming Sales Tax changes for Washington
Starting next month (October 2025), Washington businesses and residents will be paying sales tax on a slew of new services -- including custom web development, IT services, digital advertising, and even temporary workers.