Angelic Sanoy

Angelic Sanoy

Share

Bookwormhead is a personalized blog created by Angelic helping freelancers and small entrepreneurs.

Bookwormhead is a personalized blog created by Angelic helping freelancer and small entrepreneurs to marketing their brand online.

23/03/2026

I’ve seen a few trusted sites suggest ALLOW_UNFILTERED_UPLOADS as the quick fix when WordPress refuses to upload a font, SVG, JSON, or some other “annoying” file type.

And yes… it works.

But this is also where WordPress security starts giving you that side-eye.
Because while it fixes your upload problem, it also chips away at one of WordPress’ built-in guardrails. What starts as:

“Ugh, I just need this font uploaded.”

Can quietly turn into:
“Well… what else can get uploaded now?”
That is the part people do not always talk about enough.

From a WordPress malware audit perspective, this constant lives in the grey zone. Helpful? Sure. Harmless? Not even close.

It is one of those settings that feels like a hero in the moment, then casually opens the door and says,

“Come on in, worms. The can is open.”

And that is my issue with it.

Because some fixes are not really fixes. They are just delayed problems wearing a helpful hat.

My take?

If the solution works by lowering a security barrier, I do not see it as a clean fix. I see it as a tradeoff. And in WordPress, those “just for now” tradeoffs have a funny way of overstaying their welcome.

22/03/2026

Sometimes the difference between a more hardened setup and a weaker one comes down to understanding how the server responds to requests for internal paths, and then adding the right .htaccess rules to make the restriction explicit.

In this case, I was reviewing the classic include-only hardening rule for wp-includes and wp-admin/includes and comparing what happens when that protection is present versus when it is not.

What I like about this kind of work is that it sits right at the intersection of development and security. It is not only about building websites that work, but also about understanding how they behave under the hood and making them more resilient.

As a web developer, I enjoy digging into things like:
WordPress hardening
server-side behavior
htaccess rules
plugin and theme risk surfaces
HTTP status analysis
practical security improvements without overloading a site with unnecessary plugins

It is a good reminder that web development is not just about front-end design or functionality. It is also about building websites that are stable, secure, and intentionally configured.

Have you ever tested how your own WordPress site responds when internal core files are requested directly?

I break down the full comparison, the meaning of the rewrite rules, and why 404, 403, and 200 matter in my latest YouTube video. Check it out here: https://lnkd.in/eBqVKa28

16/03/2026

Acquisition optimisation is one of the smartest ways to lower CAC and CPA while improving conversions and AOV.

If you’re using WooCommerce on WordPress, there’s actually a hidden built-in feature that can give you extra attribution data about your customers and help you make better marketing decisions. In my latest tutorial, I shared how to enable it and use it to strengthen your acquisition strategy.

Understanding where your customers really come from can be a game changer when it comes to optimising campaigns and scaling what works.

Watch the full video to see how it works.
https://www.youtube.com/watch?v=7r6kY5Wfeco

How about you? How do you strategise your acquisition efforts and track what’s really driving conversions?

12/03/2026

Adding users in WordPress is easy on the surface, but there’s much more happening behind the scenes.

In this video, I break down how WordPress user accounts actually work and show you different ways to add users and manipulate user data directly in the WordPress database.

We’ll cover:

Approach 1: Using the WordPress Dashboard
Approach 2: Navigating phpMyAdmin and manually inserting data into the WordPress tables
Approach 3 (Recommended): Using SQL queries for faster and more controlled user creation

No matter which method you use, understanding the inner workings of WordPress users is essential if you want to dive into hardcore WordPress development.

Need custom WordPress help? Visit bookwormhead.com

12/03/2026

Adding users in WordPress is easy on the surface, but there’s much more happening behind the scenes.

In this video, I break down how WordPress user accounts actually work and show you different ways to add users and manipulate user data directly in the WordPress database.

We’ll cover:

Approach 1: Using the WordPress Dashboard
Approach 2: Navigating phpMyAdmin and manually inserting data into the WordPress tables
Approach 3 (Recommended): Using SQL queries for faster and more controlled user creation

No matter which method you use, understanding the inner workings of WordPress users is essential if you want to dive into hardcore WordPress development.

Need custom WordPress help? Visit bookwormhead.com

12/03/2026

How to Add Users in WordPress:phpMyAdmin, and SQL Explained

Adding users in WordPress is easy on the surface, but there’s much more happening behind the scenes.

In this video, I break down how WordPress user accounts actually work and show you different ways to add users and manipulate user data directly in the WordPress database.

We’ll cover:

Approach 1: Using the WordPress Dashboard
Approach 2: Navigating phpMyAdmin and manually inserting data into the WordPress tables
Approach 3 (Recommended): Using SQL queries for faster and more controlled user creation

No matter which method you use, understanding the inner workings of WordPress users is essential if you want to dive into hardcore WordPress development.

12/03/2026

If you don’t understand how WordPress stores and manipulates user data inside the SQL database, you’re only seeing half the picture.

In this video, I talk about the different ways to add users in WordPress and why the more advanced approach gives you better control when working behind the scenes.

No matter your level — beginner, pro, or expert — every method has its purpose. But for serious WordPress development, the expert approach still comes out on top.

Watch here:
https://lnkd.in/em3vhk4i

25/12/2025

We discuss three approaches to starting a Laravel application: local standalone installation, using XAMPP/MAMP, and the recommended Docker container method. We highlight the benefits of Docker for developer collaboration and avoiding configuration incompatibilities.

09/12/2025

Btw noh, nganong baliktad man ang response nila.

Bye!
See yah! Unswaaa???

07/12/2025

Due to many requests, I’ve created a tutorial on how to apply for a Bridging Visa B (BVB) so you can travel outside Australia while waiting for your substantive visa to be approved.

This tutorial is based on my successful application for a Bridging Visa B without submitting any plane tickets or travel bookings. I share exactly how I approached it and what worked for me.

Link to Apply:
https://immi.homeaffairs.gov.au/help-support/departmental-forms/online-forms/bridging-a-b-c-visa-application-online

Please note that I am not a migration agent or a registered legal practitioner. Everything I share is based purely on my own experience. Please take this information as general guidance only.
For personalised or professional advice, always consult a qualified immigration lawyer or a MARA-registered migration agent.

28/03/2025

In this tutorial, I discussed about how to apply a skills assessment in ACS and also share some real-time example of documents I submitted during my application. Fortunately, I was able to get two positive results for my ANZCO code. Feel free to shoot me a question at [email protected]

Want your business to be the top-listed Gym/sports Facility in Melbourne?

Click here to claim your Sponsored Listing.

Location

Category

Address

Melbourne
Melbourne, VIC
3030

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm
Saturday 9am - 5pm
Sunday 9am - 5pm