English
Deutsch
Polski
PHP2Shell: What Provides Protection and Why Unpatched Websites Will Remain
PHP2Shell affects server-side PHP. Corrected packages and running processes both matter. Examples explain updates, intrusion checks and the additional session advisory.
Web Development
16 articles in this category
Follow this category by RSSAbout this category
My first website was the starting point, and the curiosity has stayed. This section explores what holds websites and web applications together behind the scenes: code, browsers, APIs and servers.
You will find explanations and examples covering HTML, CSS, JavaScript, HTTP and APIs, as well as redirects, security headers, performance and sitemaps. I follow the technical process to help explain why a page behaves the way it does.
HTTP/3 on a First Visit: How a Client Discovers the Protocol and What Twenty Sites Answered
HTTP/3 can serve a first request. Twenty dated curl responses and three direct QUIC checks separate protocol announcements, reachability and actual selection, including access blocks and redirect limits.
gzip, Brotli and zstd: HTTP Compression Measured
A dated check of twenty domains separates seventeen regular HTML responses from three access blocks. Response-body ratios, encoding negotiation and a single-response measurement explain what the figures establish—and what remains outside the sample.
301, 302, 307 and 308: Which Redirect Changes the Request Method
Redirects differ in permanence and method handling. A reproducible curl test explains POST behavior; caching, search signals and credentials require separate checks.
Cache-Control Explained: What no-cache, no-store, max-age and s-maxage Each Do
Cache-Control separates storage permission, validation and freshness. no-cache permits storage with validation; no-store restricts HTTP-cache storage. max-age and s-maxage do not guarantee retention, and a header check alone cannot prove actual cache behaviour.
Sitemap Structures Measured at 24 Sites: Indexes, Splitting, Extensions and Violations
A historical sample of 24 domains shows how sitemap files are split and where errors occur. Original data clarify the byte limit, nested indexes and the limits of conclusions drawn from identical modification dates.
Tutorial: Reading a Minified Third-Party Script Before It Goes on the Site
A structured review combines preserved source files, targeted searches, isolated behaviour tests, CSP rules and integrity checks. Search results provide leads; missing matches do not prove that a function is absent.
Tutorial: Checking a JSON Payload Before It Goes Into a Tag
A local JSON check separates syntax, duplicate names and numeric precision from application rules. A tested Python example handles nested duplicates and valid scalar values without printing the payload.
Comparing Two GTM Container Exports: Normalising Before the Diff and What a Line Diff Cannot Show
A reliable GTM export comparison starts with consistent formatting and a clear scope. IDs, dependencies and array order need careful handling, while runtime changes require evidence beyond the JSON diff.
Regular Expressions: The Greedy Dot, Missing Anchors and Nested Repetition
Greedy quantifiers, missing boundaries and ambiguous repetition can produce incorrect matches or excessive processing. Concrete JavaScript examples show how flags, character classes and whole-input validation interact.
