Python guides from the workbench.

Featured guide · Security · Python and PHP

Python and PHP, on security: what PHP2Shell made obvious

On 21 October 2026 the PHP project shipped emergency releases for two critical bugs, now widely called PHP2Shell. CVE-2026-109618 and CVE-2026-109619 are both scored CVSS 9.2. Together they can let an unauthenticated attacker run their own code on a server that is still on an older build. They are a useful comparison, because the bugs are in the engine that turns an HTTP request into a PHP program.

9 min readRead the guide →

Start here

12 guides Django in production Performance, testing, architecture and the patterns we use on every build. 4 guides Wagtail & CMS Choosing a CMS, StreamField patterns and getting editors the most from Wagtail. 2 guides Migrations Moving from WordPress and Drupal to Wagtail without losing content or rankings.

Latest

DjangoOct 2026 Django vs Next.js: which should you use for a web application?Use Django when you are building a business application: accounts, permissions, an admin and data with rules. Use Next.js when the product is a React interface, your team writes TypeScript, and pages need to rank in search. Plenty of products … 4 min → DjangoOct 2026 In-house, freelancer or agency? How to staff a Python web projectHiring, contracting and outsourcing each suit different stages of a product. Here is how they compare on cost, speed and risk in the UK, including what a senior in-house Python developer really costs in the first year. 3 min → DjangoOct 2026 How to choose a Django development agency: 12 questions to askMost failed software projects were in trouble before the first line of code. These twelve questions separate agencies that will ship your Django application from the ones that will learn on your budget. 4 min → DjangoOct 2026 How much does a Django web application cost in the UK?A Django web application built by a senior UK team typically costs £40k–£60k for an MVP, £60k–£95k for a full product and £100k–£160k or more for a platform. Here is what sits behind those numbers, and how to keep yours … 4 min → DjangoOct 2026 Upgrading Django 3.2 to 5.2 LTS: a step-by-step planDjango 3.2 stopped receiving security fixes in April 2024. Here is how we move apps to 5.2 LTS one release at a time, keeping production live throughout. 2 min → DjangoJun 2026 Building a multi-tenant SaaS with Django: isolation & performance.A practical guide to multi-tenant SaaS architecture in Django: shared-schema vs schema-per-tenant vs database-per-tenant, enforcing isolation safely with managers and middleware, and keeping it fast at scale. 10 min → DjangoMay 2026 Why Django is the ultimate framework for UK fintech startups in 2026Django for UK fintech: built-in security, FCA/GDPR/PSD2 alignment, append-only audit logs, and faster time-to-market — explained for founders and CTOs. 12 min → DjangoMay 2026 Reducing server costs by 40% with Django optimisation: a case study.Django performance tuning case study: how we cut a UK SaaS platform's monthly server bill by 40% in six weeks through profiling, ORM optimisation and query reduction. 10 min → DjangoMay 2026 Modernizing Django Monoliths to async-first. A 2026 playbook.Upgrade a legacy Django monolith to async-first without a rewrite. Django 3 → 5 migration patterns, async DRF, untangled imports and measurable performance gains. 9 min → DjangoMar 2026 Top 5 Python web architecture patterns for high traffic.Python web architecture for scale: modular monolith vs microservices, multi-tier caching, Celery, Postgres tier scaling, async I/O & stateless workers. For senior devs & tech leads. 12 min → DjangoJan 2026 Django performance optimisations in productionThe Django performance optimisations we apply to every production app — N+1 queries, Redis caching, Celery, database indexing, query profiling. 4 min → DjangoNov 2025 How we test Django applicationsFactory Boy over fixtures, pytest over unittest, transaction isolation, and how we write tests that catch real bugs rather than just satisfying coverage thresholds. 5 min →