Jonathan Moore

Designed and developed a WordPress diagnostic and support recorder built around a reproduce-record-review workflow. CrashTape correlates browser, PHP, WordPress, and outbound HTTP activity into a session timeline so support technicians and developers can diagnose problems from captured evidence instead of relying only on user descriptions.

• Captures PHP warnings and fatal errors, browser JavaScript failures, failed fetch/XHR and outbound HTTP requests, REST and AJAX metadata, mail failures, environment details, WP-Cron status, and recent plugin, theme, and core changes.
• Built guided and automated conflict-isolation workflows that narrow plugin conflicts through binary-search testing while preserving declared dependencies and avoiding changes to the site's actual active-plugin configuration.
• Implemented theme isolation, session comparison, baselines, deduplication of repeated errors, environment snapshots, and rule-based most-likely-cause analysis tied back to captured events and recent changes.
• Designed privacy protections that redact secrets and personal information before storage, with configurable privacy profiles and custom redaction rules.
• Generates redacted support ZIP packages for attaching reproducible diagnostic evidence to support tickets and includes extension hooks for custom diagnostics, analysis rules, and recorded events.
• Developed and validated the release candidate with an automated test suite covering single-site and multisite WordPress environments, browser-based end-to-end testing, and dedicated security and privacy review.

Designed and developed a forensic malware investigation and remediation plugin for WordPress that detects suspicious activity, traces potential persistence mechanisms, correlates evidence across findings, and verifies cleanup within the scope of its scans.

• Built multi-phase scanning across WordPress core, plugins, themes, file content, database content, and persistence mechanisms, combining signature matching with PHP behavioral analysis and data-flow tracing.
• Implemented detection for obfuscated code, web shell capabilities, disguised executable uploads, hidden administrator accounts, suspicious cron entries, and configuration tampering.
• Developed cross-finding correlation and a 14-day investigation timeline connecting findings with file changes, administrator activity, and quarantine actions.
• Implemented protected quarantine, hash-verified restoration, trusted WordPress core file replacement, and pass/fail/review-required cleanup verification.
• Built resumable scanning modes, signed malware definitions, privacy-aware local detection, exportable HTML/JSON/CSV reports, automated tests, and WordPress Multisite support.

Rebuilt the abandoned SEO Internal Links plugin from the ground up as Smart Internal Links, modernizing the codebase for PHP 7.4 and PHP 8.x and current WordPress development practices.

• Implemented automatic internal linking for posts, pages, categories, tags, and configurable custom keywords.
• Added secure settings handling with sanitization, input validation, type checking, and nonce verification.
• Created a modern tabbed WordPress administration interface with configurable link limits, exclusions, targeting, and external-link behavior.
• Improved performance through optimized caching, database access, content-processing order, and WordPress object cache usage.
• Resolved PHP 8 compatibility problems, malformed links inside existing anchor tags, shortcode and caption issues, and compatibility failures involving complex page-builder themes.
• Added migration documentation, troubleshooting guidance, security documentation, a changelog, and WordPress-focused development standards.

Developed a standalone PHP recovery utility for managing WordPress plugins when the WordPress admin area is inaccessible because of plugin conflicts, fatal errors, or other failures.

• Built direct plugin activation and deactivation controls that operate independently of WordPress core by reading and updating the active plugin list in the database.
• Scans installed plugins and displays plugin metadata, active status, and bulk management controls through a lightweight web interface.
• Automatically reads database configuration from wp-config.php and includes IP-based access restrictions for emergency administrative use.
• Designed as a practical troubleshooting and recovery tool for restoring access to broken WordPress installations.

Developed a WordPress plugin that helps local businesses add structured LocalBusiness data to their websites through automatically generated JSON-LD schema.

• Supports multiple business locations with address, contact, geographic, opening-hours, service-area, map, and business-type information.
• Built a WordPress administration interface with collapsible location sections and dynamic fields for business-specific options.
• Generates JSON-LD structured data for search engines and injects the schema into the site head without requiring manual template editing.
• Implemented the plugin using WordPress coding and security practices with support for specialized fields such as restaurant cuisine, reservations, and menu URLs.

Designed and implemented a server-side image optimization system for WordPress that automatically creates modern AVIF and WebP versions of uploaded JPG and PNG files without requiring an image optimization plugin.

• Built a Bash conversion workflow that scans the WordPress uploads directory, preserves the original folder structure, skips images that have already been processed, and logs conversion activity.
• Used avifenc and cwebp for automated image conversion and removes generated files when the optimized version is larger than the original image.
• Scheduled the conversion process through cron to process newly uploaded media automatically at five-minute intervals.
• Configured Apache rewrite and content-negotiation rules to detect browser support and transparently serve AVIF or WebP while retaining the original WordPress image URLs and fallback images.

Developed an in-house WordPress plugin and companion web application that query security statistics from Wordfence data and turn them into live attack reporting and visualizations. The project provides an easier way to see how much malicious traffic is being blocked and to present server attack activity in a clear, accessible format.

• Integrated WordPress and Wordfence security data with custom PHP-based reporting and visualization tools.
• Built dashboards for displaying blocked attack totals and security activity from managed server environments.
• Created a companion live cyber attack map to visualize attack activity beyond the standard WordPress administration interface.
• Combined WordPress plugin development, database querying, security monitoring, custom front-end development, and data visualization in a production project.