Skip to content
PHP security alert Two critical PHP flaws (php2shell) were fixed on 21 October. Is your site's PHP patched? Check in a minute →
OvKit
Menu
Download free

WordPress, one switch at a time.

Plain guides to the settings WordPress ships with: what they do, what they cost you, and how to turn them off, with or without a plugin.

  1. Security

    Is Your WordPress debug.log Public? Check and Fix It

    A public wp-content/debug.log hands out server paths, plugin lists and sometimes personal data. A ten-second check, and how to move the log out of reach.

  2. Security

    PHP Files in the WordPress Uploads Folder: What They Mean

    The uploads folder should hold only media. How to find PHP files there, tell harmless ones from back doors, remove them and stop PHP running in uploads.

  3. Security

    How to Check If Your WordPress Core Files Were Modified

    Core files never change between updates, so a file that differs from the official release is a warning sign. Check with WP-CLI or without SSH, and what to do next.

  4. Security

    php2shell: How to Check If Your WordPress Site’s PHP Is Patched

    Two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) were fixed on 21 October 2026. Find your site's real PHP version, see if it is fixed, and what to ask your host.

  5. Tracking

    Set Up WooCommerce Conversion Tracking for GA4 and Meta Pixel

    Track WooCommerce purchases in Google Analytics 4 and Meta Pixel without a bloated plugin. Here's the clean GTM-based approach.

  6. Frontend

    Add a Top Notification Bar to WordPress (No Page Builder Needed)

    Need a site-wide announcement bar for sales, maintenance notices, or important updates? Here's how to add one to WordPress without a page builder.

  7. Maintenance

    How to Recover a Broken WordPress Site (Emergency Guide)

    White screen of death? Fatal error? WordPress recovery mode not working? Here's your emergency guide to getting back in when everything is broken.

  8. Security

    Why WordPress Login Error Messages Help Hackers

    WordPress tells attackers if a username exists by showing different error messages. Here's how to replace those hints with a generic message.

  9. Frontend

    Change the Site Title That Appears in Browser Tabs

    WordPress shows your site title and tagline in browser tabs and search results. Here's how to control exactly what appears — with and without SEO plugins.

  10. Frontend

    Add a Favicon to Your WordPress Site (The Right Way)

    A missing favicon makes your site look unfinished. Here's how to add one properly in WordPress — covering browser tabs, bookmarks, and mobile home screens.