WordPress Site Hacked? What to Do in the First Hour
A hacked WordPress site feels like an emergency, and the first hour matters. Here's what to do, in order, and what to leave until the dust settles.
Blog
Practical writing for founders. Custom vs templates, WordPress, and what AI-ready actually means.
A hacked WordPress site feels like an emergency, and the first hour matters. Here's what to do, in order, and what to leave until the dust settles.
There are four realistic ways to keep a WordPress site maintained. Here's who each one suits, what can go wrong, and the questions that help you choose.
When a developer vanishes, the website usually isn't lost. It's locked. Here's how to work out what you own, recover the domain, hosting and WordPress logins, and stop it happening again.
Website prices in Malaysia range from a few hundred ringgit to six figures. Here are my own estimate ranges by type of site, what drives the cost, and the yearly running costs to budget for.
Fewer clicks from Google but rankings look the same? AI Overviews may be the reason. Here is what real studies show, how to check your own data, and what to do next.
llms.txt gets sold as the robots.txt of AI. The reality is more modest. Here is what the file is, who reads it, what Google has said, and when it is worth ten minutes of your time.
Each AI assistant finds sources in its own way. Here is how ChatGPT, Claude, Gemini and Google AI Overviews pick the sites they cite, the crawlers behind them, and what to fix on your site.
Portfolios all look good. The questions you ask before signing are what separate a website that works for years from one you have to rebuild. Here are the ten I'd ask.
A blank white page where your WordPress site should be is frightening, but it is usually fixable in under an hour. Here is the order I work through it.
Elementor doesn't have to be slow. Most slow Elementor sites are slow because of settings left off, too many add-ons and heavy layouts. Here's how I speed them up.
The WordPress critical error message hides a PHP fatal error. Here's how to find out what caused it, fix it with or without wp-admin access, and stop it coming back.
Slow WordPress sites usually have two or three causes stacked on top of each other. Here are the twelve I find most often, how to test for each, and how to fix them.
A WooCommerce store is a WordPress site with a till attached. Here is the monthly maintenance it needs, the jobs you can do yourself, and my estimate ranges for the cost.
Nine tools across backups, security and uptime monitoring, with prices checked on each vendor's site in October 2026, what the free versions really do, and a simple starter stack for a small business site.
Tested updates and restorable backups come first. Monthly PDFs and 'unlimited' promises come last. Ten care plan features ranked by what they actually protect, plus the questions to ask before you sign.
Security warnings, missing backups, a lost admin login, plugins nobody dares update. Nine signs a WordPress site has outgrown DIY care, ranked by how fast you should act.
A practical checklist for taking over a WordPress site from a previous developer or agency: what to secure on day one, what to audit in week one, and what to fix after that.
Elementor and Crocoblock sites break in predictable places. This is how I update, test and speed up builder-based WordPress sites without surprises.
A calm, step-by-step way to get a WordPress site back after a bad update: identify the culprit, disable or roll back the plugin, restore if needed, and prevent a repeat.
The WordPress maintenance routine I actually follow, split into weekly, monthly, quarterly and yearly tasks, with a copy-and-paste checklist at the end.
In my experience, small business maintenance plans in Malaysia run from roughly RM150 to RM1,500 a month. Here is what each level tends to cover, and the costs that sit outside the monthly fee.
From the quotes I see, UK care plans for small business sites tend to run around £50 to £150 a month, European plans around €50 to €300, and Malaysian plans RM150 to RM1,500. Here's what sits behind those numbers and how to compare them fairly.
AI website builders can produce a decent first draft in minutes. Here's where that's enough, where it quietly costs a small business, and how a professional (who also uses AI) does the rest.
Practical SEO for founders: pick keywords people actually type, make the page the best answer, and keep technical basics clean. Do it on a custom site, not an AI template.
Ignore the trend list. Keep the things that help a founder get found and get paid: custom layout, speed, real type, and a site that is not an AI-builder dump.
Responsive design is not a theme toggle. It is how a custom WordPress or coded site stays usable and rankable on the phone your next client is holding.
Slow pages, high bounce, and a design that looks like 2016 are signs. So is a site that was generated last month and already feels generic. Here is when to redesign.
We use cookies to see how visitors use this site, so we can improve it. They only load if you accept. Privacy policy