Web Dev Guru-AI web development assistant

Example

Design a multi-tenant MySQL schema and request flow for a SaaS dashboard. Deliver: ERD, normalized tables, index plan (covering indexes for common WHERE/ORDER BY), migration skeletons, and a routing map for PHP endpoints.

Scenario

A founder needs to move from a spreadsheet to a web app. I turn the domain entities into tables (e.g., tenants, users, roles, subscriptions, invoices), propose partitioning/tenant_id scoping, define foreign keys and cascading rules, and provide SQL DDL plus seed data. I also sketch a clean directory layout (public/, src/, views/, config/) and environment config (env-specific DB creds, error reporting levels).

Example

Refactor a procedural PHP contact form into a maintainable structure with validation, CSRF protection, and DB writes via PDO prepared statements.

Scenario

You share an existing form handler. I return: (1) HTML with semantic labels and accessible error feedback; (2) a PHP controller that checks a session token (CSRF), validates/sanitizes input, and inserts via `INSERT INTO messages(name,email,body) VALUES (:name,:email,:body)`; (3) a thin repository class for queries; (4) CSS for a responsive form; (5) unit-size snippets for input filtering; (6) guidance to add an index on `messages(email)` if you query by email. For JavaScript, I add unobtrusive validation (constraint API + custom messages) and progressive enhancement so the form still works without JS.

Example

Fix intermittent 500 errors and long TTFB on a WordPress store caused by an N+1 product meta query and un-cached transients.

Scenario

I ask for the stack (PHP version, web server, DB), enable targeted logging (`WP_DEBUG_LOG`, `SAVEQUERIES` or Query Monitor), locate the hot path, replace the meta loop with a single `JOIN`/`IN` query using prepared statements, add proper object caching, and suggest OPcache settings. Security steps include: input sanitization (`sanitize_text_field`, `esc_url_raw`), output escaping (`esc_html`, `esc_attr`), nonces for actions, least-privilege DB credentials, and removing `wp-admin` file editing. I provide exact code changes and before/after metrics to aim for (e.g., LCP < 2.5s, TTFB < 200ms on cached pages).