Tag: cloudflare

PHP2Shell is two unauthenticated PHP RCE flaws. Find every PHP container in your homelab, patch to the fixed release, and keep Cloudflare's WAF as a seatbelt.

Cloudflare's Clef decision model tied Jev on accuracy in a private benchmark, abstained on junk better, and cost 4.2x more per decision. Real numbers inside.

Garrul's 2026-05-25 roadmap promised moderation tools, a faster widget, and admin polish. 89 days and 53 releases later, here is the honest scorecard.

A security audit of Garrul, my Cloudflare Workers comment system, found 2 critical bugs. Both had the same root cause as one I had already fixed in June.

A WordPress login bot burned 90% of my Cloudflare Workers free tier in two hours attacking a site that has never run PHP. Here's what actually stopped it.

Cloudflare Durable Objects solve the one thing serverless can't: coordination. Storage API, WebSocket hibernation, gotchas, and a working rate limiter build.

Claude Code and other AI coding agents need somewhere to run. Compare laptop, Docker, throwaway VMs, and Cloudflare Workers on blast radius, cost, and setup.

I looked at a lot of self-hosted comment systems. None of the ones I wanted ran on Cloudflare Workers. So I wrote one. Here's the story and the deploy.

Akismet's licensing terms are increasingly hostile to small sites. Here are 11 spam-protection options, hosted APIs, CAPTCHA widgets, and DIY honeypots, that actually work in 2026.

Real cloudflared config: many services on one tunnel, Access policies, origin TLS, what quick tunnels are for, and what Cloudflare can see in your traffic.

Cloudflare Workers run your JS at the edge, no servers, no cold starts, 100k free req/day. Here's what they're actually good for.

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it: rules, rate limits, and all.