Component-based Drupal — how it is built in practice
Component-based development is not just a frontend trend — in Drupal it is a concrete architectural choice that affects both editorial workflow and long-term maintenance costs.
Short practical notes about Drupal development, testing, AI-assisted work and keeping websites healthy.
Component-based development is not just a frontend trend — in Drupal it is a concrete architectural choice that affects both editorial workflow and long-term maintenance costs.
reCAPTCHA works, but it loads scripts from Google, tracks users and requires GDPR consent. Here is an alternative you can manage yourself.
Why consistency is not an aesthetic preference but a functional requirement — and how to achieve it in practice.
Headless Drupal is a powerful architectural choice — but not for every project. Here is when it genuinely helps and when it simply adds complexity.
The agency's country matters less than whether they work in your timezone, respond when it counts and understand what is at stake.
Drupal project quality is not visible in the design. It is visible in the code structure, tests and how changes are deployed.
Drupal website cost is not mainly about design. The largest share of cost typically comes from functionality, integrations and ongoing maintenance.
An AI tool builds your site and puts it live. But when it breaks at 11pm, data leaks, or a client calls in a panic — who do you turn to?
Drupal CMS is not a new product — it is the same Drupal, pre-configured so that getting started is faster and simpler.
Drupal does not run well on every hosting environment. It is worth checking a few important parameters before signing a contract.
Drupal multisite suits organisations managing multiple sites who want shared modules, updates and maintenance processes.
A website must do more than work. It must be secure, fast, privacy-compliant, accessible and readable by machines. Some of these are recommendations — others are legal requirements.
A modern website requires far more than one developer. Every requirement — security, performance, accessibility, GDPR, content — needs its own set of skills.
The WebPro website is a fully custom build, written with AI assistance. No Drupal, no ready-made framework. An honest account of the decisions, difficulties and outcome.
Not every defect is functional. Sometimes an update breaks layout while the form still technically works.
AI generates content quickly, but speed does not mean quality. Repetitive phrases, inaccurate information and a missing voice are risks that need to be managed deliberately.
The Drupal platform assessment gives an initial public-data-based view of whether a website may need maintenance, upgrades or a deeper audit.
From 19 June 2026, many online shops must provide a clear electronic way to withdraw from a contract.
The most useful UI tests cover the journeys the client immediately notices when they break.
Schema.org markup tells search engines whether a page describes a service, an article, an organisation or a product. Google uses it for rich results, AI agents for understanding content.
How AI helps build better workflows, tests and checklists when a developer stays in control.
AI can find useful signals, but code review must not become blindly accepted suggestions.
Automated workflows reduce manual work, make changes traceable and help avoid breaking the public website during development.
Which Playwright and PHP tests usually bring the fastest value in a Drupal project.
Going live is technical work, not only a button press. A good checklist reduces downtime and hidden errors.
LCP, CLS and INP are Google's metrics that affect search ranking. Drupal sites have specific causes and specific solutions for each.
AI can speed up analysis, but migration responsibility stays with the technical team.
Why the first migration task is mapping risks and dependencies, not writing code.
Drupal supports multilingualism systematically — content, interface, configuration and URLs can all be language-specific. It requires planning, but the results are correct.
A cheap website quote often leaves out work the client still has to pay for later.
Accessibility affects sales, service, reputation and compliance. A broken form or checkout can exclude part of the audience.
A one-off fix solves a bug. Maintenance reduces the chance of future bugs and security risk.
GDPR is not only a legal document. Website forms, logs, cookies, accounts and online orders all involve personal data.
A good contract describes not only the result, but also responsibility, testing and handover.
A poor brief leads to wrong pricing, surprises mid-project and disputes at the end. A good brief does not need to be long — it needs to be precise.
If a website works only as long as nobody changes it, it is already a business risk.
Technical debt does not come from carelessness — it comes from decisions that were reasonable at the time. The problem is that it is not measured or managed.
Changing providers is easier when the state of code, access and hosting is known first.
Drupal publishes security updates through a structured process. Applying them requires Composer, testing and staged deployment — not just clicking update.
Permissions are not only about access. They affect content quality and security.
Drupal and WordPress suit different projects. The question is not which is better, but which fits your specific requirements.
If the old solution blocks every change, a version upgrade alone may not solve the problem.
An outdated Drupal site does not break overnight, but the risk grows every month. Security vulnerabilities, end-of-life PHP, broken modules and rising remediation costs.
Performance work starts with measurement, not random module installation.
Drupal maintenance, upgrade and migration are three different services for three different situations. The choice depends on where your site is today.
Migration complexity often sits in custom code, not in Drupal core.
Composer is not a convenience add-on. It is how Drupal dependencies stay repeatable and controlled.
One old module can keep the whole site stuck on an old version.
An online shop must work when the customer uses a keyboard, screen reader or clear error messages.
Drupal maintenance is not only module updates. The server PHP version must also be supported and upgradeable.
WCAG 2.2 is not only about contrast. Many issues appear in forms, menus and keyboard navigation.
An audit shows where the risks are before development starts and what work is actually needed.
A good maintenance partner does not only react to bugs. They reduce the chance of bugs reaching production.
Drupal upgrade cost is not defined by the version number alone, but by what the system actually contains.
Drupal 10 end of life is not a reason to panic, but it is a reason to check readiness before the final month.
A Drupal 7 site may still run, but technical and security risk grows every month.
A slow Drupal site is not Drupal's fault — most performance issues come from misconfigured caching, unoptimized queries or a poorly set up server.
WooCommerce suits a simple product-based store that needs to launch quickly. Drupal Commerce suits complex business logic or a site that does more than just sell.
Drupal Core search works for a small site. When content volume is high and search needs to be fast and accurate, Search API + Solr is the standard solution.
Paragraphs is one of the most widely used Drupal modules. It gives editors a flexible content builder without needing a developer for every change.
Public sector websites must be secure, accessible and maintainable for years. Drupal meets these requirements better than most alternative CMS platforms.
Every second of load time reduces conversions by roughly 7%. This is not a hypothesis — it is a measured result from multiple large-scale platforms.
Clients see the result — whether the site works and looks good. Technical quality is hidden. Here are the questions and signals that help evaluate it.
From June 2025, the EAA is mandatory for all online stores selling to EU consumers. Non-compliance means fines and legal action.
AI modules for Drupal are no longer experimental — several have reached stable status and are in use on production sites.
Drupalgeddon, SA-CORE-2018-002, CVE-2020-13671 — these are not abstract code numbers. They are vulnerabilities that were exploited at scale. Here is what actually happens.
You cannot plan a security incident — but you can plan your response. Here is a clear plan for what to do when a Drupal site is compromised.
Many organisations have a backup. Fewer have checked whether it actually works. Here is why a restore test is mandatory.
Layout Builder is built into Drupal core, Paragraphs is a module. Both let editors control page structure — but the right choice depends on your project's needs.
Views lets you display, filter and sort Drupal content without writing code. But in more complex scenarios it hits its limits. Here is when.
Migrate API is Drupal's built-in migration framework. It lets you map, transform and import content from practically any source.
Without config sync, Drupal configuration lives only in the database — invisible, unversioned, unrecoverable. Config sync makes it visible.
A custom module is the answer when existing modules do not cover the need. Here is when it is the sensible choice and what to budget for.
"3 months" is a common answer — but is it realistic? Here are honest timelines for different Drupal projects and what actually drives the schedule.
The previous developer has left a Drupal site behind with incomplete documentation. Here is how to handle the situation without losing anything important.
Both pricing models are valid — but for different types of projects. Here is what to watch out for with each.
Most projects do not stall because of bad code. They stall because of poor communication, unclear requirements, and unmet expectations.
Automated tests find about 30% of accessibility issues. The rest can only be found by testing with a real screen reader. Here is how to get started.
An accessibility audit is not just an automated scan. It is a systematic assessment that finds issues tools cannot see.
A poor colour combination means some users cannot read the text. WCAG sets clear minimum requirements — here is how to check them.
GDPR has been in force for several years but many Estonian websites still do not comply. Here is where to start practically.
Most Estonian websites use WordPress. More complex platforms often choose Drupal. Here is why and when that choice is justified.
Kaido Toomingas
WebPro Company OÜ
If the article describes your situation, you do not have to read everything first. A real person will help you choose the next step.
If the issue is urgent, you can call or email directly. The main next step is still to describe your needs in the form.
Kaido Toomingas
WebPro Company OÜ