On July 17, WordPress shipped an emergency security release for a vulnerability chain now being called wp2shell.
Security
🕑Jul 09, 2026 🖋John Locke
💬0
Tempting Fate: What Happened When One of Our "Protected" Sites Got Hacked
A real client site got hacked and lost 35GB of files overnight. Here's how we diagnosed it, recovered in a few hours, and what we changed after.
🕑May 28, 2026 🖋John Locke
💬0
Every Night, Argo Watches
While your site is running, things change. A content editor tweaks a configuration setting. A security vulnerability surfaces in a dependency. A production fix gets applied directly instead of going through the normal release process.
🕑May 22, 2026 🖋John Locke
💬0
The Night the Internet Tried to Kill Your Website
May 2026
My name doesn't matter. Call me the op. I run a small shop — we keep websites alive, patch the holes before the wrong people find them, and make sure that when something goes sideways, there's always a way back. It's not glamorous work. But this spring? This spring was something else.
🕑May 19, 2026 🖋John Locke
💬0
Your Website Will Be Attacked. Here's How We Make Sure You Survive It.
The question used to be whether your website would face a serious security threat. That question has been answered. The question now is whether you'll be ready when it happens — and whether you can recover cleanly when something gets through.
🕑May 18, 2026 🖋John Locke
💬0
The Rules Have Changed: Security in the Age of AI-Assisted Attacks
Security is getting dramatically harder and more expensive. AI is simultaneously driving an explosion in vulnerability discovery and weaponizing the exploits that follow. The question for every organization with anything online is no longer whether to invest in resilience — it's whether that investment is already in place before the next incident arrives.
🕑May 06, 2026 🖋John Locke
💬0
When Your WordPress Site Launches Into a Performance Crisis
A real-world post-mortem on 15 performance issues we fixed in 4 days — and what every WordPress site owner should know before going live.
🕑Apr 15, 2026 🖋John Locke
💬0
Ask Freelock: Why Is My Site Still Getting Hammered by Bots — Even on a Major Hosting Platform?
We recently heard from a former client who had moved their site to a major managed hosting platform, hoping for more stability and better protection.
Error Prevention
Imagine clicking "Submit" on a legal contract, only to realize you meant to click "Save Draft." Or transferring $1,000 to the wrong account with no confirmation step. Or deleting your entire photo library with a single misclick. These aren't hypothetical scenarios - they happen every day when websites don't implement proper error prevention.
🕑Jun 12, 2025 🖋John Locke
💬0
Website Availability - handling an outage
How do you get a website back up, when it goes down?
Create a deep redirect in a headless site
One of our clients has a custom surveying application built with a Drupal back end, and a VueJS/headless front end. They use this application to record observations in various buildings and sites that don't meet accessibility requirements.
They give their clients access to the front end. This application organizes observations into particular sites, in particular projects, grouped by the requirement. Each observation can have photos attached, along with notes and recommended solutions.