🟢 Available for work

The Tanning Shop

Migration & Security Project — Client had experienced downtime due to site vulerabilities.

Responsibilities

  • Site maintenance
  • Site Migration
  • Technical Support

Highlights

  • Security
  • WordPress

Company

The Tanning Shop

Links

The Migration & Security Project

My responsibilities for the project were varied and the scope grew over the 12 months I worked on it;

  • Migrate 3x websites to a new hosting provider
  • Action solutions to issues raised on a Pentest report
  • Review sitehealth + implement updates

Site Migration

To begin with I sourced some alternatives to their current hosting provider (Heart hosting). We looked at UK Fast, WP Engine & Kinsta.

In the end we went with Kinsta which had better support and administration UI than UK Fast and Heart, and allowed more great customization and control than WP Engine.

Due to the high traffic levels of https://thetanningshop.co.uk/ we agreed to perform the migration during off peak times.

Security & Vulnerabilities

Working with Cyber Crowd and the Pentest audit they provided, I actioned a multitude of patches for vulnerabilities to the site. Mostly they fell within one of these categories;

  • Server configuration
  • General plugin vulnerability or an out-of-date plugin
  • Theme functionality

Some examples include

  • Old PHP version
  • Only allowing a curated list of IPs access to WordPress dashboard
  • Weak SSL/TLS implementation
  • Vulnderable version of jQuery UI
  • WordPress admin login page exposed
  • WordPress Username Enumeration
  • Strict Transport Security Not Enforced

Plugin review

Mostly this was a review of the current suite of plugins (40+).

The review identified

  • Plugins to be updated
  • Plugins to keep
  • Plugins to delete

In the end we managed to reduce the plugins to less than half (20), updating 15, all with minimal impact to site functionality.

I created a testing SOP so that myself and the client could test all key site functionality on both the staging sites and on production once my changes had been rolled out.

This resulted in a Security Headers increase from an E rating to an A

May 22nd

2026
DevelopmentTipsWordPress

Stop Clients Seeing Old Versions: WordPress Script Caching Explained

Tired of clients seeing outdated CSS and JavaScript? This guide shows how to implement smart cache busting that works automatically based on your WordPress environment.

Read more ->
Stop Clients Seeing Old Versions: WordPress Script Caching Explained

May 12th

2026
DevelopmentWordPress

How to Reduce WordPress Database Queries Without Removing that Important Plugin

Learn how to reduce WordPress database queries and improve performance without removing essential plugins. Practical optimization tips for WordPress developers.

Read more ->
How to Reduce WordPress Database Queries Without Removing that Important Plugin

April 14th

2026
✍️ BlogAI

AI and Human Creativity: My Conflicted Thoughts on Artificial Intelligence

A personal reflection on artificial intelligence, creativity, and work—exploring fear, ethics, and why the human journey behind art still matters in the age of A.I.

Read more ->
AI and Human Creativity: My Conflicted Thoughts on Artificial Intelligence
See more moments ->
© 1985-2026 Carl Lister