Builder Notes

Real timelines, real numbers, honest takes on tools and tech. No marketing fluff.

Stop Contact Form Spam Without reCAPTCHA (PHP Guide)

We killed contact form spam on our own site and three client rebuilds without touching Google reCAPTCHA: a honeypot field, a two-second time-trap, and a CSRF token, all in plain PHP that runs on the cheapest cPanel plan.

More articles

HTTP Security Headers in .htaccess: Copy-Paste Config

A plain walkthrough of HTTP security headers on cPanel shared hosting: the full .htaccess block, what each header actually does, how CSP will break your site before it helps it, and real before/after numbers from a South African cPanel site.

Brotli + gzip on cPanel: The .htaccess Config That Works

One .htaccess block adds Brotli and gzip compression to any cPanel shared hosting account. No server access, no plugins. Here is the config, what each line does, and how to verify it worked.

Serve WebP Images on cPanel With One .htaccess Block

Serving WebP on cPanel shared hosting takes one .htaccess block and a batch conversion script. No server admin access, no CDN, no plugin required.

How we built the SA health scanner in 9 days (and what broke)

We shipped health.nel404labs.co.za from zero to production in 9 days using Claude Code. Here is the real timeline, the things that went wrong, and the numbers.

AI coding tools in 2026: 6 months of real numbers

We have used Claude Code, Cursor, and Copilot on real client projects over 6 months. Here is an honest breakdown of speed, cost, and what each tool is actually good at.

Why we ditched WordPress for our own site (and who should still use it)

We rebuilt nel404labs.co.za as static HTML with a few PHP endpoints. Faster, cheaper, and fully under our control. Here is exactly why we did it and what we gave up.