Engineering notes
PHP, JavaScript, Node.js, AWS, platform work, architecture patterns, database changes, and integration details written around decisions that matter in maintained applications.
Browse by category
Latest writing
A workflow for turning implemented endpoints into an executable Postman collection with safe environments, authentication, examples, errors, state guidance, and a maintainable handoff.
Read article
A practical architecture for adding WebAuthn passkeys and authenticator-app TOTP without creating a second identity system or weakening recovery and session security.
Read article
A release checklist for the complete request path: DNS, Cloudflare, TLS, Apache rewrites, PHP runtime, trusted proxy headers, caching, security boundaries, and rollback.
Read article
A production-focused design for verifying Stripe events, acknowledging quickly, deduplicating safely, and updating local payment or subscription state without trusting browser redirects.
Read article
A practical first-month playbook for mapping an unfamiliar PHP system, finding its real boundaries, choosing safe early changes, and building confidence without demanding a rewrite.
Read article
A practical look at the confirmed PHP 8.6 Alpha 2 features, migration risks, and what teams should test before the planned November 2026 release.
Read article
A practical investigation path across browser permissions, secure origins, ICE connectivity, Ant Media, playback policy, and WoWonder integration code.
Read article
A production pattern for signature verification, idempotency, transaction boundaries, retries, and observable webhook processing.
Read article
How to isolate upload limits, permissions, queues, FFmpeg paths, codecs, processing logs, and final media delivery in a PlayTube installation.
Read article
How to plan backward-compatible schema changes, staged releases, data backfills, observability, and rollback for active PHP products.
Read article
What the WoWonder Node.js service improves, what it does not, and how to validate the VPS, proxy, TLS, ports, process manager, and fallback behavior.
Read article
Designing stable HTTP status, error code, field validation, correlation, and retry semantics for frontend and integration teams.
Read article
A layered workflow for DNS authority, proxy state, origin TLS, redirect loops, cache behavior, real client IPs, and safe rollback.
Read article
Use AbortController, request sequencing, and intentional UI states to stop stale network responses from overwriting current user intent.
Read article
A reliable shutdown sequence for HTTP servers, load balancers, database pools, background work, health checks, and container timeouts.
Read article
Design browser-to-S3 uploads with short-lived permissions, server-owned object keys, validation, completion checks, and cleanup.
Read article