Geo Targeting for Bricks Builder

WordPress plugin

2024 – Present

HTTP Security Header is a WordPress.org plugin by Mohit Goyal in PHP that adds CSP, HSTS and security headers from a settings screen, now at 1,000+ installs. It exists so that site owners can pass a security header scan without editing server configuration they are rightly afraid to touch. Most WordPress sites fail security header scans. The fix is well known, but adding headers means editing .htaccess or the server config. Site owners will not touch that, and many agencies would rather not be responsible for it. The result is that sites stay exposed to clickjacking, content sniffing and cross-site scripting that a few response headers would mitigate. I wrote this plugin so that anyone can turn on the important headers from Settings > Security Headers, with sensible defaults and validation, and without a trip into the hosting panel. The plugin covers Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, X-Permitted-Cross-Domain-Policies and Feature-Policy. Each header has its own settings with defaults that are safe to switch on, and the values are validated before they are saved. The part I care most about is the fallbacks. A bad Content-Security-Policy or a mistyped frame option cannot lock an admin out of their own site, because the plugin falls back to a working value rather than serving a header that breaks the dashboard. I published it to WordPress.org in November 2024 and have shipped updates through version 3.1. It is built in PHP for WordPress 5.0 and above. It sends headers from WordPress itself rather than from the web server, which makes it portable across Apache, Nginx and managed hosts where the owner has no config access. The settings screen uses the standard WordPress settings API, so it behaves like core and is easy to audit. Around the plugin I wrote a 15-article explainer series covering each header in turn. The series doubles as documentation and as the content that brings people to the plugin. I also built a companion online scanner on inspiredmonks.com that grades a site from A+ to F, so an owner can see the problem before installing the fix. At the time of writing the plugin reports more than 1,000 active installs, about 6,900 downloads and a 5 out of 5 rating on WordPress.org. Site owners who could never have edited a server file can now pass a header audit in a few minutes. Agencies I work with install it as a standard part of a build. The lesson from maintaining it has been that safe defaults and fallbacks matter more than coverage. A plugin that cannot break a site gets left switched on. Need a WordPress plugin built or hardened for your own site or product? Send me the requirements and I will reply with a plan.

Hospitality

2025

Ravens Ait venue website: WordPress and Bricks Builder build by Mohit Goyal for a Thames island venue, with 20+ event pages, Stripe bookings and HubSpot forms. It was built from scratch in 2025 through a London agency, scores 94 or higher on PageSpeed and has grown revenue pages since launch. Ravens Ait hosts weddings, christenings, private dining, corporate meetings and celebrations of life on a private island on the Thames near Kingston. The venue needed a site that reflected a luxury experience and converted browsers into enquiries. The brief asked for a luxurious light-gold palette, a sticky header, smooth non-intrusive animations, a quick availability call to action, an event-type carousel, an Instagram feed, case studies and testimonials. It also called for accessible contrast and a mobile-first layout. Working through a London agency, I built the full site from scratch on WordPress with Bricks Builder. The homepage has a video hero with Google-fetched reviews. There are nine event pages, including wedding sub-pages for Asian and European weddings, and eleven seasonal pages, from Holi to Boxing Day. All of them come from one Bricks template, so a new occasion is a content task rather than a build. Every event page follows one SEO heading structure: a single H1, three H2s for venue settings, catering and entertainment, H3s for FAQs, testimonials and the enquiry form, and an email subscription section. A gallery, blog templates with an author box, and a contact page with FAQs complete the core. Enquiry forms sync to HubSpot through Google Tag Manager, with mandatory fields so leads arrive complete. Later in 2025 I added revenue pages. A Wimbledon Tennis on the Island page has a date picker, per-date packages, Stripe payment through Forminator, customer and admin email templates, past dates disabled and a daily booking summary email. A Christmas 2025 page carries early-bird packages and a PDF flipbook menu. Dinner and Dance and Bollywood Student Night pages take Stripe bookings and share a combined promo popup. Bricks Builder was chosen over heavier builders because it produces lean markup. That is what made the PageSpeed target realistic on a page full of video and imagery. WP Rocket handles caching. The exit-intent popup is limited to once per 12 hours, with a scroll-triggered version on mobile, so it captures leaving visitors without nagging. HubSpot via Google Tag Manager keeps the CRM integration out of the theme code. Forminator with Stripe gave the venue paid bookings without a full e-commerce install. A cookie disclaimer and per-page SEO sections finished the build, followed by a QA pass that deduplicated card content and unified the sliders. The site has been live since April 2025 at ravensait.co.uk with a reported PageSpeed score of 94 or higher. The venue can now add a seasonal page or a ticketed event from templates, take payment on the page and see bookings summarised by email each day. The project taught me that one well-structured template, applied twenty times, is worth more than twenty bespoke pages. Run a venue that needs enquiry pages and ticketed events on one site? Send me your next project and I will reply with a plan.

E-commerce

2025

WooCommerce online ordering for Whitfield Service Station in Dover, built by Mohit Goyal with a custom delivery radius plugin and cloud receipt printing. Three food brands on one forecourt now sell online for delivery and collection, and every order prints automatically in the kitchen. Whitfield Service Station is a forecourt in Dover that runs a Budgens store, a Fireaway pizza outlet and a doner and gyros kitchen. The owner wanted all three selling online without three separate systems. The catch was operational. Delivery had to stop at a sensible radius, fees had to reflect distance, orders had to reach the kitchen without staff watching a screen, and the store needed to switch ordering off when it closed. I built it on WordPress with Bricks Builder and WooCommerce. The shop has a three-brand landing with cards, per-brand category pages with a vertical category sidebar, a Budgens offers grid, combos, a My Account dashboard and a login and signup popup. Checkout is a multi-step Fluid Checkout with Stripe, Apple Pay and Google Pay. After the May 2025 feedback round I made the homepage e-commerce first, with dynamic featured, promotion and bestseller sections and brand cards with real product photography and Order Now buttons. I also audited the Fireaway and doner catalogues against their Just Eat menus. My custom Delivery Restriction Checker plugin geocodes the customer's address with the Google Maps API, hides delivery beyond 10 miles, charges a distance-based fee and falls back to pickup or dine-in. The delivery fee later became a flat fee, and cash on delivery was disabled. WooCommerce Product Add-Ons handle toppings and variations. A CSV import template with tutorial videos lets staff manage the menu. An 18+ confirmation covers alcohol and vapes, an opening-hours popup and WhatsApp float sit on the front end, and the owner can close the store or set hours from the admin. Food hygiene ratings and GDPR, privacy and terms pages round it out. The point-of-sale link is the piece that makes it work day to day. Orders print automatically to an Epson receipt printer through PrintNode, with order alerts in the WooCommerce mobile app, so the kitchen never has to check a dashboard. Writing the delivery logic as my own plugin rather than configuring a shipping extension was deliberate. The geocoding, radius and fee rules were specific enough that a bespoke plugin was smaller and easier to change than a general product, as the later switch to a flat fee showed. Bricks keeps the theme light, WP Rocket handles caching, and All in One SEO covers search. A W3C validation and performance report closed phase one in August 2025, with staff documentation covering price changes, reports, reprinting receipts, cancelling orders and hours. The platform is live at whitfieldservicestation.co.uk. The three outlets take online orders through one checkout, and staff manage the menu and the printer without a developer. The project confirmed that in food ordering the printer integration is the feature that decides whether the system gets used. Planning a similar online ordering store for a takeaway or forecourt? Send me your next project and I will reply with a plan.