WooPress
WooPress is the platform Anargy builds its e-commerce websites on.
It started as WordPress with WooCommerce, and is reworked step by step: features that are not wanted are removed, and other parts are rewritten in modern PHP. This continues until WordPress is no longer needed.
The result is a smaller, faster, and more secure website, with code that is fully under our control.
Pages and Routing
- Pages are served by a router with a class per page, before WordPress runs its query.
- Exact paths, and patterns with typed placeholders such as a number or a slug.
- Several languages per site, with a path per language, hreflang links, and a language switcher.
- Redirects for old paths, and automatic redirects for paths with a trailing slash or capitals.
- A sitemap with every page and the date of its last change.
- Classic templates and shortcodes, without the block editor.
Performance
- The CSS and JavaScript of a page are inlined, so they need no extra requests.
- Icons are inline SVG symbols.
- Every page gets an ETag, so a browser gets a short 304 Not Modified answer when the page has not changed.
- Database access through a thin PDO layer.
- No calls to outside services while a page is built.
Security
- Malformed requests and probes for files such as .env or .sql are rejected before WordPress loads.
- Protection against cross-site request forgery through the Fetch Metadata headers of the browser, without tokens in forms.
- Security headers on every response: HSTS, a frame-ancestors policy, a strict referrer policy, and nosniff.
- Pages of a logged-in user are never stored in the browser cache.
- Parameterized queries for all database access.
- All code follows a strict coding standard, with strict types.
WooCommerce Without the Extras
- No connections to WooCommerce.com, WordPress.com, or Jetpack.
- No usage tracking, promotions, upsells, or marketplace suggestions.
- Orders are always stored in the High-Performance Order Storage tables.
- Analytics, cost of goods sold, and order attribution are always on.
- Emails use the classic templates, with the CSS inlined by WooPress itself.
- Features that are not used, such as blocks, product reviews, and the legacy reports, are removed with all their code and data.
Administration
- WooPress admin pages next to the WordPress screens that are still used.
- System pages with the details of PHP, the constants, the scheduled tasks, and the stored options.
- A mail log and mail tools.
- An admin bar on the website for logged-in managers.