Notes worth keeping .

How an unauthenticated WordPress Core exploit spread across seven sites on one RunCloud server, the signs it leaves behind, the cleanup recipe I repeated on each site, and the changes that stop it from happening again.

How sultankautsar.com is tracked: a hand-built consent banner, Consent Mode V2 in advanced mode, Google Tag Manager, five GA4 events, and a Content Security Policy that only allows Google's tag domains.

How I use Claude Opus 5.5 in Claude Code for client work, company projects, and personal tools: the habits, the review loop, and what nine days of real sessions looked like.

SES Guard, a small CloudFormation stack that watches Amazon SES for sending spikes and high bounce or complaint rates, stops sending automatically, keeps the logs, and alerts Telegram, PagerDuty, and email with who was sending.

A practical headless CMS setup for a company brand site using WordPress and Next.js on RunCloud, with Docker, Supervisor, on-demand revalidation, and scripted release, deploy, and rollback.

How development, preview, and production environments work together, with build-once promotion, feature flags, and a rollback plan decided before you need it.

My GPT-6 Astra workflow: high reasoning for planning, low reasoning for implementation, and a practical process for better specifications, code review, testing, and delivery, with a comparison to Sol.

A personal reflection on using Codex and the GPT-5.6 family to plan, review, and implement software faster while handling demanding client and internal work.

Clean up, speed up, and secure your Google Tag Manager container: GTM audits, server-side tagging, and a data layer the site and the container can both rely on.

Google Ads conversion tracking, including server-side setups, by a Google Tag Manager expert. Accurate attribution so automated bidding learns from conversions that really happened.

Consent Mode V2 implementation by a Google Tag Manager expert, so the site follows GDPR and other privacy rules and the data your decisions depend on still holds up.

Google Analytics 4 setup and full customer-journey tracking by a Google Tag Manager expert, built so the reports hold up when someone asks them a hard question.

A personal reflection on using GitHub Copilot to learn React Native, ship a mobile app for a sales team, and live through the switch from premium requests to AI credits.