Repository files navigation

How to work with WordPress. 💡#active-development#self-hosted#long-term#monitoring

We run WordPress on Debian GNU/Linux operating systemwhich runs on an UpCloud cloud instance.

Who does what.

1. Editor manages the content and related settings.
2. Developer commits plugin and theme source code to GitHuband initiates deployment (CI/CD).
3. Viktor manages the operating system, webserver software,WordPress core, plugins, the theme, privileged users,system settings, security, backup and migrations.

There is no web-based administration.WordPress installation is managed with git,Composer and WP-CLI on the command-line.

Our WordPress installation includes preparations for the next fewerror-free years.

These preparations are implemented inMU plugins.

Please consider sponsoring me monthly if you use my packages in an agency.

They are already sponsoring me.

Our WordPress installation is stored in a git repositoryand managed with Composer.

This is the starter template.szepeviktor/composer-managed-wordpress

Custom plugins and themes live in separate git repositories.

Purchased themes should have an active child theme.

wp plugin install child-theme-configurator --activate

Keep the child theme in a git repository also.

Let's prevent working against each other!

• Don't write code changing WordPress core behavior anywhere else thanMU plugins,
  • removing admin menus, admin bar elements
  • disabling emojis
  • disabling comments
  • disabling feeds
  • disabling embeds
  • mail settings and logging
  • WAF: authentication/login, HTTP and REST API security
  • comment form and contact form spam traps
  • media management
  • nav menu, translation and content caching
  • HTTP and HTML optimization
  • CDN support
• Plugin update check HTTP requests and updates themselves are disabledbecause the entire WordPress installation ismanaged with Composer
• Plugin and theme update and WordPress management-related admin pages are removed(updated with Composer, administered with WP-CLI)
• WP-Cron is ran by a Linux cron job (the default pseudo cron/web callback is disabled)
• Only things necessary for generating custom admin pagesand generating HTML go into thetheme
• Business logic (e.g. processing input from visitors) goes intoplugins
• Please adhere to a coding standard ofyour choice
• Please avoiddiscouraged functions
• We run static analysis on all source code
• PSR-4 autoloading is suggested (no need forrequire and custom class autoloading)
• WordPress core is installed in a separate subdirectory
• Please also seehosting information for developers

💡

• Hosting
• Software stack
• Performance
• Security
• Production environment

• WordPress installation:szepeviktor/composer-managed-wordpress
• wp-config
• AlternativeWP-CLI installation
• MU plugins for core, theme and plugins:/mu-plugins/and how to installDefault plugins
• Starter plugin:szepeviktor/starter-plugin
• Starter theme:timber/starter-theme
• Starter child theme:/divi-child/
• Feature plugins:szepeviktor/wordpress-plugin-construction

• wp plugin install https://github.com/WordPress/plugin-check/archive/refs/heads/trunk.zip
• wordpress/plugin-check-action GitHub action
• wp plugin install https://github.com/WordPress/theme-check/archive/refs/heads/master.zip
• Wordpress/theme-review-action GitHub action
• unofficial fork of Theme Check plugin
• WPThemeReview Standard for PHP_CodeSniffer
• PHP Insights

• Leaving legacy technologies behind
• Hooks in WordPress
• OOP for WordPress
• Tools for development:SentencePress
• wp_mail emailshttps://github.com/johnbillion/wp_mail

• Query Monitor
• OPcache status
• Test Mode
• Unit tests without a databasehttps://github.com/Automattic/wordbless
• WP_Mock
• Codeception (BDD)