Python guides from the workbench.

Featured guide · Security · Python and PHP

Python and PHP, on security: what PHP2Shell made obvious

On 21 October 2026 the PHP project shipped emergency releases for two critical bugs, now widely called PHP2Shell. CVE-2026-109618 and CVE-2026-109619 are both scored CVSS 9.2. Together they can let an unauthenticated attacker run their own code on a server that is still on an older build. They are a useful comparison, because the bugs are in the engine that turns an HTTP request into a PHP program.

9 min readRead the guide →

Start here

12 guides Django in production Performance, testing, architecture and the patterns we use on every build. 4 guides Wagtail & CMS Choosing a CMS, StreamField patterns and getting editors the most from Wagtail. 2 guides Migrations Moving from WordPress and Drupal to Wagtail without losing content or rankings.

Latest

WagtailMay 2026 Structuring complex content in Wagtail: StreamFields explained.Wagtail StreamField tutorial for content managers and junior devs: why rich text fails, how StreamFields work, custom blocks, and editorial workflow patterns that scale. 11 min → WagtailApr 2026 The ultimate guide to SEO optimisation in Wagtail CMS.Wagtail SEO best practices: built-in features, metadata models, sitemaps, Django SEO packages, Core Web Vitals & structured data. The full playbook for SEO teams and marketers. 11 min → WagtailDec 2025 Advanced Wagtail StreamField patterns we useStructBlock nesting, custom chooser blocks, block-level validation, and the StreamField patterns that separate beginner Wagtail builds from production-grade ones. 5 min → WagtailOct 2025 Wagtail for editors: hidden features guideSnippet choosers, bulk actions, scheduled publishing, comparison views, workflow moderation — the Wagtail editorial features most builds never surface. 5 min →