https://anthonylee.me/articles Technical writing on WordPress, WooCommerce, TypeScript and the systems behind them. en https://anthonylee.me/articles/cs-cart-upgrade-safe-customisation https://anthonylee.me/articles/cs-cart-upgrade-safe-customisation Fri, 14 Aug 2026 00:00:00 GMT An upgrade replaces core files rather than merging them, so a change made in one is not at risk — it is guaranteed to be deleted, silently. How to customise heavily and still stay current. CS-Cart PHP E-commerce https://anthonylee.me/articles/csp-unsafe-inline https://anthonylee.me/articles/csp-unsafe-inline Fri, 14 Aug 2026 00:00:00 GMT Blocking inline scripts is most of what a Content Security Policy is for, because injected XSS is almost always inline. Why so many policies give that up anyway, and the two ways to take it back. Security Headers Web https://anthonylee.me/articles/nfc-attendance-system https://anthonylee.me/articles/nfc-attendance-system Fri, 14 Aug 2026 00:00:00 GMT Reading the card takes a weekend. Modelling identity so cards can be lost, surviving an offline reader, and being honest that a tap records a card rather than a person — that is the project. NFC / RFID IoT Research https://anthonylee.me/articles/prerender-react-without-a-framework https://anthonylee.me/articles/prerender-react-without-a-framework Fri, 14 Aug 2026 00:00:00 GMT A plain Vite build ships an empty div. You can get real HTML out of it in about forty lines, keep your setup, and skip hydration entirely — as long as you know which trade you are making. Vite React Performance https://anthonylee.me/articles/scroll-driven-animations-safely https://anthonylee.me/articles/scroll-driven-animations-safely Fri, 14 Aug 2026 00:00:00 GMT animation-timeline replaces a pile of IntersectionObserver code with a few lines of CSS. It also has a failure mode you will never see in your own browser, because unsupported browsers fall back to a time-based clock. CSS Accessibility Performance https://anthonylee.me/articles/desktop-only-javascript https://anthonylee.me/articles/desktop-only-javascript Fri, 14 Aug 2026 00:00:00 GMT CSS hides the pixels, not the JavaScript. Gating two decorative libraries behind the breakpoint the stylesheet already used cut this site's mobile payload by about two thirds — with the real numbers. Performance CSS Mobile https://anthonylee.me/articles/face-recognition-accuracy https://anthonylee.me/articles/face-recognition-accuracy Fri, 14 Aug 2026 00:00:00 GMT Every model quotes an accuracy figure above 99%. Almost nobody explains why yours will be worse — the threshold you pick, the size of the gallery you search, and whose faces the benchmark was built from. Computer vision Machine learning Python https://anthonylee.me/articles/typed-api-over-legacy https://anthonylee.me/articles/typed-api-over-legacy Fri, 14 Aug 2026 00:00:00 GMT You cannot replace the old system and you cannot let every new service reach into it. What belongs in the layer between — and the temptations that turn it into a second legacy system. Architecture TypeScript APIs https://anthonylee.me/articles/access-control-that-holds https://anthonylee.me/articles/access-control-that-holds Fri, 14 Aug 2026 00:00:00 GMT Permissions have to stay correct in code nobody has written yet. Why capability checks beat role checks, why scoping belongs in the query rather than the view, and the defaults that quietly grant access. Security Architecture Reliability https://anthonylee.me/articles/woocommerce-hpos-migration https://anthonylee.me/articles/woocommerce-hpos-migration Fri, 14 Aug 2026 00:00:00 GMT High-Performance Order Storage has been the default for new WooCommerce installs since 8.2 — but an upgraded store keeps the old one, and the version number won't tell you which you're on. The order of operations that makes the switch boring. WooCommerce HPOS Migration https://anthonylee.me/articles/multi-vendor-marketplace-reality https://anthonylee.me/articles/multi-vendor-marketplace-reality Fri, 14 Aug 2026 00:00:00 GMT Every guide compares plugins on features and price. Six months in, none of that is what hurts. What actually decides the stack is money that is not yours, shipping that is not one parcel, and the vendors themselves. E-commerce Marketplace Architecture https://anthonylee.me/articles/contact-form-spam-without-captcha https://anthonylee.me/articles/contact-form-spam-without-captcha Fri, 14 Aug 2026 00:00:00 GMT A honeypot, a minimum fill time and a rate limit stop the overwhelming majority of form spam, cost a real visitor nothing, and send no data to a third party. Including the parts that go wrong — starting with the honeypot that traps screen reader users. Security Forms Accessibility https://anthonylee.me/articles/payment-and-shipping-correctness https://anthonylee.me/articles/payment-and-shipping-correctness Sun, 09 Aug 2026 00:00:00 GMT Payment and shipping code fails differently: the customer finds it before you do, the damage is money, and you often can't just deploy a fix and move on. What that changes about how you write it. Payments E-commerce Reliability https://anthonylee.me/articles/realtime-without-the-mess https://anthonylee.me/articles/realtime-without-the-mess Sun, 09 Aug 2026 00:00:00 GMT A WebSocket is easy to open and hard to keep honest. The reconnection, the gap while you were away, and why I'd usually send 'something changed' instead of the change itself. WebSocket TypeScript Architecture https://anthonylee.me/articles/woocommerce-at-scale https://anthonylee.me/articles/woocommerce-at-scale Sat, 08 Aug 2026 00:00:00 GMT WooCommerce handles real traffic fine. What falls over is everything built around the assumption that it wouldn't — here's what goes first, and the order I'd fix it in. WooCommerce WordPress Performance https://anthonylee.me/articles/typescript-api-boundary https://anthonylee.me/articles/typescript-api-boundary Sat, 08 Aug 2026 00:00:00 GMT TypeScript checks nothing about what the server actually sent. A practical account of where the types stop being true — especially against a PHP backend — and what belongs at that boundary. TypeScript APIs Architecture https://anthonylee.me/articles/remote-across-time-zones https://anthonylee.me/articles/remote-across-time-zones Sat, 08 Aug 2026 00:00:00 GMT What actually makes a twelve-hour time difference workable — not tooling, but a handful of habits about how questions get asked and how work gets handed over. Remote work Process Communication https://anthonylee.me/articles/wordpress-elementor-performance https://anthonylee.me/articles/wordpress-elementor-performance Sun, 26 Jul 2026 00:00:00 GMT A practical, no-fluff guide to speeding up WordPress sites built with Elementor — what actually causes the slowdown, and the fixes that make a measurable difference. WordPress Elementor Performance