Found an Unknown WordPress Admin? Investigate Before Deleting
An administrator you do not recognise deserves attention, but a username alone does not tell you what happened. It could belong to a former developer, a hosting…
Read the guideThe NithuDev journal
More practical website guides.
Practical guides to website performance, security, SEO, ecommerce, automation and redesign. Understand what needs fixing, compare your options and plan your next website project.
The guide library
All website guides
242 published guides · Page 20
WordPress Two-Factor Authentication: Set It Up Without Losing Access
A stolen WordPress password should not be enough to give someone control of your business website. Two-factor authentication adds another check to an interactive login, but the…
Read the guide
A Practical WordPress Security Maintenance Checklist for Businesses
Website security maintenance works better as a small set of owned tasks than as a long list nobody reviews. A business needs to know who applies urgent…
Read the guide
How to Restore a WordPress Backup Safely After a Hack
A backup can make recovery much easier, but the newest copy is not automatically the right one to restore. It may already contain the compromise, and replacing…
Read the guide
Why WordPress Malware Keeps Coming Back: Backdoors and Reinfection
The site is cleaned, the warning disappears, and a few days later the same redirect or suspicious file returns. Repeating the same deletion may provide temporary relief,…
Read the guide
WordPress SEO Spam Cleanup: Recover Your Content and Search Presence
Search results show product pages you never wrote. Your normal page title has been replaced with unrelated text. Or a Search Console report contains URLs that do…
Read the guide
WordPress Redirecting to Another Website? A Diagnosis Guide
Your website opens normally for you, but a customer says it sends them elsewhere. That inconsistency can make a redirect problem frustrating to investigate. It does not…
Read the guide
My WordPress Website Was Hacked: What to Do First
A customer says your website sent them to a strange page. Your host sends a suspension notice. Or you log in and find an administrator you did…
Read the guide
A WordPress Plugin Has a Vulnerability: What Should You Do?
You receive an alert naming a plugin your website uses. The useful response is neither to ignore it nor to remove half the site in a panic.…
Read the guide
WordPress Template-Loading Vulnerability: A Safe Update Guide
A headline about a WordPress “template flaw” can describe more than one issue. Before deciding whether your site needs action, identify the actual advisory, the release that…
Read the guide
PHP2Shell and WordPress: How to Verify Your PHP Security Update
Your WordPress dashboard can say “up to date” while the server running it still needs a PHP security fix. That is the important distinction behind PHP2Shell: the…
Read the guide
WordPress Security Updates: What to Check in October 2026
A security alert is useful only when it helps you decide what to do next. For a WordPress business owner, that usually means answering three questions: do…
Read the guideFrom understanding to implementation
Good advice. Practical help when you need it.
I’m Nithu / Suthakaran Nithursan. I build, repair and improve websites, with services covering performance, security recovery, Shopify and clinic websites. These guides help you ask better questions; a project review helps define the work your website actually needs.
Meet the developer