https://roxl.net/blog Automating. Saving time. Making the world better. en-us therawlex@gmail.com (Artem Krivoshchekov) therawlex@gmail.com (Artem Krivoshchekov) Sat, 08 Aug 2026 00:00:00 GMT https://roxl.net/blog/backend/analytics-counters-should-not-live-in-theme-files https://roxl.net/blog/backend/analytics-counters-should-not-live-in-theme-files A tracking snippet pasted into a template disappears with the next theme update, competes with the page for the browser, and double-counts when someone pastes it twice. All three have the same fix. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpressphpjavascriptanalyticsperformanceprivacycactusplay-marketplace https://roxl.net/blog/backend/delivery-as-a-consequence-of-payment https://roxl.net/blog/backend/delivery-as-a-consequence-of-payment Digital goods delivered by hand are limited by working hours and protected only by attention. Moving delivery onto order events changes what the system guarantees, and the API is what stops a second channel becoming a second implementation. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) woocommercewordpressphpautomationrest-apie-commercecactusplay-marketplace https://roxl.net/blog/backend/derived-queue-resumable-email-campaigns https://roxl.net/blog/backend/derived-queue-resumable-email-campaigns A bulk email run that crashes halfway is either restarted from the beginning, mailing everyone twice, or tracked with a cursor that goes stale. There is a third option: compute who still needs the message instead of recording it. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpressmysqlsqlcronemailqueuescactusplay-marketplace https://roxl.net/blog/backend/pricing-a-catalogue-against-an-upstream-store https://roxl.net/blog/backend/pricing-a-catalogue-against-an-upstream-store Reselling means your prices depend on someone else changing theirs. Fetching on page load takes your shop down with theirs; a nightly export goes stale. The middle path is a cache with a pricing strategy behind it. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) woocommercewordpressphpcachingpricingapicactusplay-marketplace https://roxl.net/blog/backend/support-widget-that-knows-who-it-is-talking-to https://roxl.net/blog/backend/support-widget-that-knows-who-it-is-talking-to Pasting a chat widget into a theme template works until the theme updates, the settings need changing, or the widget adds a database query to every page. Three small decisions fix all of it. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpresswoocommercephpcachingsupportfreescoutcactusplay-marketplace https://roxl.net/blog/backend/taking-payment-through-someone-elses-gateway https://roxl.net/blog/backend/taking-payment-through-someone-elses-gateway When the payment gateway is contracted to a different site, the buyer leaves and you have to learn the outcome somehow. The two ways this integration usually fails are an unauthenticated callback and two order records that drift apart. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) woocommercewordpressphppaymentshmacwebhookscactusplay-marketplace https://roxl.net/blog/cybersecurity/social-login-duplicate-accounts-race-condition https://roxl.net/blog/cybersecurity/social-login-duplicate-accounts-race-condition An OAuth callback can fire twice for one sign-in, and a naive handler creates two accounts for one person. Here is why it happens, why checking for an existing user does not fix it, and how claiming the auth code in a lock table does. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpressoauthopenidauthenticationwoocommercerace-conditioncactusplay-marketplace https://roxl.net/blog/cybersecurity/two-factor-codes-for-shared-accounts-woocommerce https://roxl.net/blog/cybersecurity/two-factor-codes-for-shared-accounts-woocommerce When fulfilment depends on a code that changes every thirty seconds, reading it off a phone does not scale. How to expose current codes to a shop and its operators without spreading the TOTP secret across the system. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) woocommercewordpresstotptwo-factorrest-apisecuritycactusplay-marketplace https://roxl.net/blog/cybersecurity/wordpress-plugin-dependency-conflicts-php-scoper https://roxl.net/blog/cybersecurity/wordpress-plugin-dependency-conflicts-php-scoper WordPress plugins ship their own vendor directories, and PHP loads whichever version was registered first. Why that breaks the other plugin, and why build-time namespacing is the only fix that survives contact with a real site. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpressphpcomposerphp-scopercaptchaplugin-developmentcactusplay-marketplace