Custom WordPress & WooCommerce plugins
Plugins built for your exact workflow: order handling, shipping, checkout rules, admin tools and integrations, written to WordPress coding standards.
Top Rated on Upwork · $100K+ earned
Senior WordPress & PHP DeveloperI fix the hard problems and keep your site secure, fast and earning.
15+ years building and rescuing WordPress, WooCommerce and PHP systems for businesses worldwide. Custom plugins, PHP 8 upgrades, malware cleanup, migrations and payment integrations, all done by me personally.
Minuwangoda, Sri Lanka Replies within hours
Available for
New projects
- on Upwork
- Top Ratedon Upwork
- earned on Upwork
- $100K+earned on Upwork
- jobs completed
- 250+jobs completed
- PHP & WordPress
- 15+ yrsPHP & WordPress
Services
Expert help where your website matters most
From one urgent fix to long-term care, I take care of the technical side so you can focus on running your business.
PHP upgrades & legacy modernisation
Move old code to PHP 8.x safely. I fix deprecated code, update libraries and test on staging, so the upgrade doesn't break anything for your customers.
Malware cleanup & hardening
Full cleanup of infected sites, backdoor removal, then hardening so the malware stays out. Comes with a 3-month free re-clean warranty.
Migrations & hosting
Moves between cPanel, VPS, SiteGround and AWS with no data loss and minimal downtime, plus forum migrations such as SMF → Discourse.
Payment gateway integration
Stripe, Authorize.Net, hosted payment pages and PCI-proxy setups for WooCommerce and custom PHP. Secure checkout that keeps card data off your server.
API & third-party integrations
Podio, Meta Conversions API, Google Merchant Center, Mintsoft, SMS gateways and any REST API, connected reliably to your site.
Email deliverability
SPF, DKIM and DMARC setup, Brevo and transactional mail. Your order emails and contact forms reach the inbox, not spam.
Maintenance & AI-assisted automation
Monthly updates tested on staging first, backups, health checks and rollback, run by my own automation tooling (auto-wp).
Selected work
Code you can inspect before you hire
Client work is confidential, but my own plugins and tools are public. Read the code, check the quality and see how I approach problems.
Open source · TypeScript
auto-wp
An MCP server that maintains WordPress sites on shared hosting: it backs up, validates the backup, applies updates one at a time with health checks and per-item rollback, and reports known vulnerabilities.
TypeScriptMCPWP-CLISSHDocker
View on GitHub Open source · PHP
MCP PHP File Manager
A Model Context Protocol server written in plain PHP, so AI assistants can safely manage files on shared hosting where Node or Python aren't available.
PHPMCPAI tooling
View on GitHub Open source · Docker
Cloudflare Workers OS in Docker
A pre-built, fast-starting Docker image for running Cloudflare Workers OS locally. An unofficial community image.
DockerCloudflareDevOps
View on GitHub WordPress plugin
Order Shipped for WooCommerce
Adds a shipping widget to the WooCommerce order screen. Enter the carrier and tracking ID and the customer gets an email, using a template you can edit in wp-admin.
WooCommercePHPEmail
View on GitHub WooCommerce plugin
Authorize.Net Hosted Payment Gateway
A WooCommerce gateway that uses Authorize.Net's hosted payment page, so card data never touches the merchant's server. This keeps PCI scope small.
WooCommercePaymentsPCI
View on GitHub How I work
A careful process that protects your business
Most website disasters happen when someone edits a live site without a plan. I work the other way round.
- 01
Diagnose first
I look at your site, code and hosting before quoting. You get a clear finding and a fixed plan, not a guess.
- 02
Work on staging
Changes are made and tested on a staging copy with a full backup in place. Your live site and your sales are never put at risk.
- 03
Daily updates
You get short progress reports every day and documented changes, so you always know where the work stands.
- 04
Support after launch
I stay available after delivery. If something related to my work goes wrong, I fix it.
- I do all the work myself, with no outsourcing
- Staging and backups before any change on live
- 3-month free re-clean warranty on malware jobs
- Upwork-protected milestones and payments
About me
A developer you deal with directly
I'm Isuru Sampath Ratnayake, a freelance web engineer from Minuwangoda, Sri Lanka. I've written PHP since the PHP 4 days and have spent more than 15 years building, fixing and securing WordPress and WooCommerce sites.
On Upwork I've completed 250+ jobs and earned the Top Rated badge. Clients come to me when something is broken, insecure or too slow, or when they need a custom feature that off-the-shelf plugins can't provide.
Today I also build AI-assisted tooling, such as MCP servers that back up, update and roll back WordPress sites automatically, so routine maintenance is faster and safer for my clients.
- Working hours
- 8:00 AM – 10:30 PM IST, Monday to Saturday
- Based in
- Minuwangoda, Sri Lanka · IST (UTC+5:30)
Technologies I work with
- PHP 5 → 8.4
- WordPress
- WooCommerce
- MySQL / MariaDB
- PostgreSQL
- JavaScript
- TypeScript
- Next.js
- REST APIs
- Stripe
- Authorize.Net
- AWS
- Cloudflare
- Docker
- cPanel / WHM
- Linux / VPS
- WP-CLI
- SPF / DKIM / DMARC
- MCP & AI automation
Read verified client reviews
Every review on my Upwork profile comes from a real, paid contract. Read what clients say about my work, communication and reliability.
See reviews on UpworkFAQ
Questions clients usually ask
Have a different question? Just ask me through the form below.
How do we start working together?+
Send a message through the form on this page or invite me on Upwork. I reply within a few hours during my working day (8:00 AM – 10:30 PM IST). For most jobs I suggest a small first milestone, such as a diagnosis or audit, so you can see how I work before committing to more.
Do you work through Upwork?+
Yes. I'm a Top Rated freelancer on Upwork with 250+ completed jobs, and contracting there gives you milestone-based payments and Upwork's payment protection.
Will you touch my live site directly?+
No. I take a full backup and make the changes on a staging copy first. Only tested changes go to live, at a time that suits your business.
Can you fix a hacked WordPress site?+
Yes. I remove the malware and backdoors, patch the entry point, harden the site and request blacklist reviews if needed. Malware cleanups include a 3-month free re-clean warranty.
Which time zone do you work in?+
I'm based in Sri Lanka (UTC+5:30) and work 8:00 AM – 10:30 PM IST, Monday to Saturday. That covers European business hours fully and the start and end of the US working day.
Do you outsource any of the work?+
Never. Everything is done by me personally, so you always talk directly to the person writing your code.
Contact
Tell me about your project
Describe the problem or the idea. I'll reply with honest advice and a clear next step, even if that step is something you can do yourself.
- Reply within a few hours on working days
- Free initial assessment of your issue
- Contract and pay safely through Upwork