02
Locking Down the WordPress REST API: Five Approaches Compared
My WordPress install exposes 227 REST API routes. Five ways to restrict them, with code, what each breaks, and why a blocked request still costs a second.
I timed my headless WordPress site against WordPress itself. Cached Next.js pages answered in 79 ms. Uncached ones didn’t, and I found a mistake of my own.
Read the articleMy WordPress install exposes 227 REST API routes. Five ways to restrict them, with code, what each breaks, and why a blocked request still costs a second.
Whether it's a new website, a redesign or something more ambitious, let's put some numbers around your idea.