WordPress AI and the PHP version problem
A client’s AI prototype broke because their site ran PHP 7.2 while our code used PHP 7.4. Here is how the WordPress Core AI team handles the same version gap, and how to build for it.
Category: Development
Building a WordPress AI architecture that lasts
A client inherited an AI setup that was really just API calls held together with duct tape, and it kept breaking. Here is the architecture I use instead: provider interfaces and DTOs that let you swap AI models without rewriting everything.
WP_Block_Processor and low-memory block parsing
parse_blocks() loads an entire post into memory and can take a server down on large content. WordPress 6.9 adds WP_Block_Processor, a streaming parser that reads block content one pass at a time so you can work with big posts safely.
WordPress 6.9 makes HTTPS the default in esc_url()
WordPress 6.9 finally makes HTTPS the default in esc_url() and esc_url_raw() when no scheme is given, as long as ‘https’ comes first in the $protocols array. No more str_replace hacks.
WordPress AI architecture: plugin or Composer library?
A real question from WordPress Core AI work: should a shared AI adapter ship as a canonical plugin or a Composer library, and why that architecture choice shapes maintenance later.
WordPress plugin security now runs on automated checks
WordPress.org has started running the Plugin Check tool on every plugin update, new and existing. A look at what the automated scans catch and how to run the same checks before you upload.
Building WordPress AI integrations that avoid lock-in
Tying a WordPress site to one AI provider’s SDK makes switching painful later. This walks through an abstraction layer with per-provider adapters so you can change models without rewriting your core code.
Gutenberg 22.1 adds a tabs block and a better HTML block
Gutenberg 22.1 ships a native tabs block and an HTML block that can carry its own CSS and JavaScript. Here is what that means for custom code and how it cuts down on extra plugins.
How to secure a WordPress AI integration
A hardcoded AI API key in front-end JavaScript is a security hole and a performance drag. This shows how to move the calls to a WordPress server-side proxy using the REST API and wp_remote_post.
How the WordPress 6.9 Abilities API affects custom roles
A client’s custom roles suddenly locked users out after WordPress 6.9 shipped its Abilities API. The fix was to register capabilities and map_meta_cap the way core now expects, not to brute-force add_cap calls.