xPython guides from the workbench.
Practical writing on Django, Wagtail and running Python in production, from projects we've shipped.
Featured guide · Security · Python and PHP
Python and PHP, on security: what PHP2Shell made obvious
On 21 October 2026 the PHP project shipped emergency releases for two critical bugs, now widely called PHP2Shell. CVE-2026-109618 and CVE-2026-109619 are both scored CVSS 9.2. Together they can let an unauthenticated attacker run their own code on a server that is still on an older build. They are a useful comparison, because the bugs are in the engine that turns an HTTP request into a PHP program.
Start here
12 guides
Django in production
Performance, testing, architecture and the patterns we use on every build.
4 guides
Wagtail & CMS
Choosing a CMS, StreamField patterns and getting editors the most from Wagtail.
2 guides
Migrations
Moving from WordPress and Drupal to Wagtail without losing content or rankings.
Latest
Nothing matches that yet. Ask us the question and we may write it up.