Skip to content

guwAPI · Blog

More articles

  1. 8 min Security, Industry

    PHP2Shell: the bug is in PHP itself, not in your code — and that's what makes it serious

    PHP2Shell is an unauthenticated RCE in the PHP engine itself. Who is really at risk, how to patch, and how to check whether you've already been hit.
  2. 2 min Industry, Security

    Meta's $16 billion scam-ad problem, and what it asks of people who build software

    Internal Meta documents projected $16 billion from scam and banned-goods ads. What that says about incentives, and the rules we build software by.
  3. 6 min Case study

    Custom website vs template: a real case study

    A storytelling blog built twice — an exact copy of its reference site, and a bespoke design where every section has its own page.
  4. 6 min Security, AI

    You shipped it in an afternoon. It's also leaking sessions.

    AI assistants like Cursor optimise for “it works”, not “it's safe”. How a single review can steal every visitor's session, and the three changes that stop it.
  5. 4 min AI, Integrations

    LeadBase: the AI chat widget and CRM we built to embed on any site

    LeadBase is an AI chat widget and lightweight CRM you embed on any website. How it works, the decisions behind it, and how it connects to CRMs like GoHighLevel.

Start a conversation

Tell me what's going on