Drupal AI has stopped being a scatter of provider-specific contributed modules that whoever needed them bolted on separately. It is now one coordinated project with an abstraction layer underneath it, a security-team-covered release cycle, and a packaged product in Drupal CMS that offers to switch parts of it on during...
Posts
Browse all posts in one place. Find tutorials, deep dives, guides and updates on AI, programming, security, infrastructure and web development.
Drupal hosting is where most of the “Drupal is slow” reputation comes from, and it is almost always a purchasing decision rather than a software problem. A site gets built properly, then goes live on a plan priced for a brochure site with a handful of PHP files. The result is a content management system with a serious...
Drupal security is one of the few parts of the open source CMS world where the published process is better than the platform’s reputation. The Drupal Security Team runs a fixed disclosure schedule, scores every advisory on a documented numerical scale, and coordinates fixes across core and tens of thousands of...
Drupal SEO has an unearned reputation. Ask around and somebody will tell you Drupal is good for search out of the box, usually while comparing it to a fifteen year old memory of another platform. A stock Drupal 11 install ships with no meta description field, no XML sitemap, no automatic redirect when a URL changes,...
A CMS migration is one of the few projects where the technical work can go perfectly and the outcome still be a disaster. The site launches on time, looks better, loads faster, and traffic falls by half, because a few hundred URLs changed shape and nobody built the map. The traffic loss is not caused by the new...
A postmortem is easy to hold and hard to make useful. The meeting happens, a document is written, four action items are recorded, and six months later the same failure occurs and somebody finds the old document while searching for something else. The word “blameless” gets most of the attention in discussions of this,...
Password storage is one of the few areas in software with a genuine right answer, published, maintained and free. It is also one of the most consistently got wrong, because the wrong answers were correct at some point and nobody revisited them. The failure is rarely exotic. It is a system built in 2016 against advice...
Supply chain security sounds like a problem for organisations with a security function, and the framing is misleading. A small team running a handful of services typically depends on hundreds of packages it has never read, pulled at build time from registries it does not control, executing installation scripts on...
Multilingual SEO is usually presented as a translation problem with some technical markup attached. Running this site in twelve languages, English, Arabic, German, French, Hungarian, Italian, Japanese, Korean, Romanian, Vietnamese and both written forms of Chinese, has made it clear that the translation is the easy...
A content refresh is the highest-return work available on most established sites, and it is unpopular because it produces nothing to announce. Updating a post that already ranks feels like maintenance. Publishing a new one feels like progress. The numbers usually disagree. The reason is that an existing page has...