PHP2Shell (CVE-2026-109618/9): Check and Patch Your PHP Server
Two critical PHP flaws let attackers run code on web servers. Who is affected, the fixed versions, stopgaps if you can't update today, and how to check your sites.
Blog
Notes on building for Shopify stores
The decisions behind custom Shopify work: when to build, how to brief and hire, how to keep an app running, and how to keep the storefront safe.
Custom apps
Custom apps, Shopify Functions, integrations and back-office tools, as a project or month by month.
Create a Shopify Custom App in the Dev Dashboard (2026 Guide)
Since January 2026, new custom apps come from the Dev Dashboard or Shopify CLI. How to create one, set scopes, get tokens, install it, and keep the app in your hands.
How to Maintain a Custom Shopify App: Routine and Handover
API versions, webhooks, logs, hosting, secrets and platform changes: what keeping a custom Shopify app alive involves, plus a routine and a handover checklist.
Market-Driven Shipping: Audit and Update Your Custom App
Shopify is moving shipping into Markets from October 1, 2026. Why apps that use delivery profiles see stale data or silent no-op writes, and how to fix yours.
A Shopify AI Agent That Waits for Your Approval: How to Build It
How to build an AI agent or MCP tool for a Shopify store that prepares refunds, stock and price changes while a person approves the risky ones: scope, logs, checks.
Shopify API Version Upgrade: A Quarterly Checklist for Custom Apps
Shopify ships a new Admin API version every three months. How to find the version your custom app calls, read the release notes, test the upgrade and deploy it safely.
Shopify Checkout UI Extensions: What You Can Add, and Where
Checkout UI extension targets for checkout, Thank you and Order status pages, which ones need Shopify Plus, the limits they run under, and when an app is enough.
What Drives the Cost of a Custom Shopify App
The scope, integrations, data, screens, hosting and upkeep that set what a custom Shopify app costs, how to get quotes you can compare, and how to spend less.
Shopify Custom App vs Public App: Which Distribution Fits
Custom, unlisted or public: what each Shopify app distribution allows, from Plus organizations and App Store review to billing and Functions on non-Plus plans.
Shopify Custom Reports: ShopifyQL, the API and When to Build
How to build custom reports in Shopify Analytics with ShopifyQL, query the same data from an app with shopifyqlQuery, export it, and when a custom report is worth it.
Shopify Customer Accounts: Extensions, Legacy Status, Migration
Shopify customer accounts vs legacy accounts, the status of the legacy deprecation, what customer account UI extensions can add, and what to check before you upgrade.
Connecting Shopify to an ERP, WMS or 3PL: How to Design It
What flows each way between Shopify and an ERP, warehouse system or 3PL, who owns each record, and how to handle retries, bulk loads, failures and reconciliation.
Shopify Flow vs a Custom App: Where Each One Stops
What Shopify Flow can do in 2026, its plan rules and hard limits, what a custom app costs to build and keep running, and a decision table for choosing between them.
Shopify Functions: What You Can Customise and Where They Stop
What Shopify Functions can change today in discounts, delivery, payments, validation, bundles and fulfillment, their limits, and which plans can use them.
Handling GDPR Customer Data Requests on Shopify
How to handle access and erasure requests on Shopify: request customer data, erase personal data, the timelines Shopify documents, and what apps and integrations must do.
Shopify POS UI Extensions: Custom Tools for Your Store Staff
How POS UI extensions add tiles, actions and blocks to Shopify POS, the targets available, what staff can do with them, plan notes, and custom vs public apps.
Shopify REST to GraphQL Migration: A Plan for Custom Apps
The REST Admin API has been legacy since October 2024. What changes when a custom app or integration moves to GraphQL, a step-by-step plan, and the traps to avoid.
Shopify Scripts Are Off: Migrate to Shopify Functions
Shopify Scripts were deactivated on June 30, 2026. What stopped working, which Function API replaces each Script, the Plus rule for custom apps, and a migration plan.
Thank You Page Scripts Stopped? Recover Tracking and Content
checkout.liquid and additional scripts were sunset on Shopify's Thank you and Order status pages. How to rebuild tracking with pixels and custom content with extensions.
How to Brief a Developer for a Custom Shopify App
What to write in a brief, which plan rules change what is possible, how to share store access safely, and what agencies and agent-based tools need to plan for.
Back-Office Tools for Shopify Teams: When to Build Your Own
Narrow staff actions, approval steps, bulk edits with a preview and weekly reports: where Shopify admin stops fitting your team, and how internal tools fill the gap.
Shopify Integrations That Don't Break: A Practical Checklist
Missed webhooks, duplicate orders, rate limits and expiring API versions: why syncs with accounting, warehouses and sheets fail, and the patterns that keep them right.
Custom Shopify App or Off-the-Shelf? How to Decide
Flow, Functions, a public app or a custom app: how to choose where new store logic should live, and the 2026 Shopify changes to check before you decide.
E-commerce developers
Developers for Shopify, WooCommerce, Etsy, Magento and the marketplaces and systems around them.
Hire a Shopify Developer: Project, Monthly Retainer or Review?
Three ways to hire a Shopify developer: a fixed-scope project, a monthly retainer or a technical review. When each fits, how to scope it and what to agree first.
Taking Over a Shopify App From Another Developer: A Checklist
Your developer left and the Shopify app still runs your store. What to secure first, which accounts to check, and how a new developer should review it.
How to Hire a Shopify App Developer: Freelancer, Agency or In-House
Freelancer, agency or in-house for a custom Shopify app: how to judge Shopify experience, the questions to ask, red flags, and what the contract must cover.
Security review
A review of the apps and scripts your store runs, safer replacements, and daily checks of what changed.
How to Check a Shopify App's Security Before You Install It
Every app you install can reach your store data or your storefront. A practical checklist to judge an app's risk before installing it and to keep it in check after.
Hire a Developer for the Risky Parts of Your Shopify Store
Custom Shopify apps are quicker to build than they were. Why hiring a developer to own the parts of your store attackers target, with daily checks, can pay off.
Safer Than Another App? Custom Options After the Checkout Hijack
After apps were used to hijack Shopify checkouts, four custom routes to cut that risk: an app review, a custom app with no remote code, Functions, and upkeep.
Shopify Checkout Hijack Through Apps (Oct 2026): What to Check
Compromised third-party apps sent some Shopify shoppers to fake checkout pages in October 2026. What happened, which apps confirmed it, and what to check today.