Everything WordPress

56
Everything WordPress Eric Myers PodCampAZ Nov. 20, 2010 1/29/2015 Everything WordPress by Eric Myers @ PCAZ 1

description

Exciting new features, plugins and themes your blog is crying for! Come join me for an hour that will help you get traffic and get your blog to the top.

Transcript of Everything WordPress

Page 1: Everything WordPress

EverythingWordPress

Eric MyersPodCampAZ

Nov. 20, 2010

1/29/2015Everything WordPress by Eric Myers @

PCAZ1

Page 2: Everything WordPress

Eric J MyersLoves WordPress who runes a Web

Devolpment company called NerdEnvy Solutions

• @ericjmyers

[email protected]

• http://www.nerdenvy.net

• http://www.ericjmyers.com

1/29/2015Everything WordPress by Eric Myers @

PCAZ2

Page 3: Everything WordPress

I am Eric J Myers

High School as a Sophomore.

I love technology and I designing WordPress websites in my spare time.

I am a Apple Fan boy!

I love WordPress; duhhhhhhh…

My laptop is a HP Pavillon dv6t Select Edition

About Me

1/29/2015Everything WordPress by Eric Myers @

PCAZ3

Page 4: Everything WordPress

What is WordPress• WordPress is a very popular blog publishing

application and content management system.

• It was first released in May 2003 by its co-founders Matt Mullenweg and Mike Little as a (considered the official) successor to b2\cafelog.

1/29/2015Everything WordPress by Eric Myers @

PCAZ4

Page 5: Everything WordPress

Requirements for WordPress• PHP version 4.3 or greater

• MySQL version 4.0 or greater

• Running on a Linux Host

• Or:

• For a free Blog: http://wordpress.com/

• http://www.nerdenvy.net/billing promo code

->>> podcampaz

1/29/2015Everything WordPress by Eric Myers @

PCAZ5

Page 6: Everything WordPress

Features• Easy installation and upgrades

• WordPress Pages

• Easy Importing

• Themes

• Comments

• Multiple authors

• Full user registration

1/29/2015Everything WordPress by Eric Myers @

PCAZ6

Page 7: Everything WordPress

Public Service Announcement #1

• It’s WordPress.

• Not Wordpress or Word Press

1/29/2015Everything WordPress by Eric Myers @

PCAZ7

Page 8: Everything WordPress

Public Service Announcement #2• Fight the fauxgo

1/29/2015Everything WordPress by Eric Myers @

PCAZ8

Page 9: Everything WordPress

Public Service Announcement #3

• WordPress = Open Source, Free Software

• Please respect the license.

• Promote user freedom.

• Spread the word.

1/29/2015Everything WordPress by Eric Myers @

PCAZ9

Page 10: Everything WordPress

Ok, lets break it down!• Parent vs. Child Themes

• Top 19 Things To After Installing WordPress

• Don’t Do’s For WordPress…

• My Top 19 Plugins

• Plugins

• SEO

• Themes

• Security

1/29/2015Everything WordPress by Eric Myers @

PCAZ10

Page 11: Everything WordPress

• Parent vs. Child Themes

1/29/2015Everything WordPress by Eric Myers @

PCAZ11

Page 12: Everything WordPress

“Parent” themes are...

• • any theme created by anyone • • no specific coding requirements

/* Theme Name: Traction Theme URI: http://thethemefoundry.com/traction/ Description: A super clean magazine theme featuring built-in post thumbnail support, a featured post slider, and a robust theme options menu. Version: 1.02 Author: The Theme Foundry Author URI: http://thethemefoundry.com/ Tags: fixed-width, two-columns, dark, black, blue, red, green, right-sidebar, threaded-comments, theme-options, translation-ready */

1/29/2015Everything WordPress by Eric Myers @

PCAZ12

Page 13: Everything WordPress

“Child” themes are...

• • a subset of modifications • • only requirement is style.css

/* Theme Name: Traction PRO Child Theme Theme URI:http://thethemefoundry.com/traction/ Description: PRO child theme for Traction. Version: 1.02 Author: The Theme Foundry Author URI: http://thethemefoundry.com/ Template: traction */

1/29/2015Everything WordPress by Eric Myers @

PCAZ13

Page 14: Everything WordPress

1/29/2015Everything WordPress by Eric Myers @

PCAZ14

Page 15: Everything WordPress

The importance of child themes...

• you don’t have to reinvent the wheel

• change only what you need

• theoretically protects your modifications from updates

1/29/2015Everything WordPress by Eric Myers @

PCAZ15

Page 16: Everything WordPress

Basic Parent/Child theme concepts

• load parent theme css

• override templates to change layouts

• functions.php does not get overridden

1/29/2015Everything WordPress by Eric Myers @

PCAZ16

Page 17: Everything WordPress

1/29/2015Everything WordPress by Eric Myers @

PCAZ17

Page 18: Everything WordPress

Top 19 Things To After Installing WordPress

1/29/2015Everything WordPress by Eric Myers @

PCAZ18

Page 19: Everything WordPress

• 1. Change the Admin Password and Manage Your Authors• WordPress gives you some random concoction of a password that you’re

*never* going to remember so the first thing you need to do is change this to something memorable.

• 2. Edit Permalinks• By default your articles’ urls will look something like

www.leemunroe.com/?p=396. This url structure is poor for SEO and poor for usability (makes no sense to your users).

• By changing your url structure to something like www.leemunroe.com/25-hot-female-web-designers you can include the post’s keywords in the url and it makes more sense to your users.

• Go to Settings > Permalinks • Under ‘Common settings’ choose ‘Custom Structure’ • Enter %postname%/ in the field • Or if you prefer to have the category in the url as well, enter

%category%/%postname%/

1/29/2015Everything WordPress by Eric Myers @

PCAZ19

Page 20: Everything WordPress

• 3. Upload Your Theme and Activate It• Download a theme or design your own • Unzip and upload it to wp-content > themes• Activate it via Appearance > Themes (then just click on your theme) • 4. Add Your Categories and Change the Default• When you install WordPress the default category is ‘Uncategorized’ and this just looks ugly. Assume

at some point you’re going to post an article and forget to select a category – what would you want that post to come under by default? I tend to use News or something general like that.

• Go to Posts > Categories• Click on ‘Uncategorized’ to edit it – change it to ‘News‘ or similar • Add your other blog categories • 5. Activate Akismet• Akismet is a plugin that blocks comment spam and if your blog allows comments then trust me,

you’re going to get spammed.• Fortunately Akismet comes with WordPress, you just need to activate it.• Go to the Plugins page in the admin area and activate Akismet • To complete Akismet activation, WordPress requires an API key. You can get this by registering on

WordPress.com then viewing your profile. • Now go to Plugins > Akismet Configuration, and paste in your key.

1/29/2015Everything WordPress by Eric Myers @

PCAZ20

Page 21: Everything WordPress

• 6. Install Google XML Sitemaps

• Google XML Sitemaps generates a compliant XML-Sitemap for your site, allowing the major search engines (Google, Yahoo, Ask, MSN) to easily index your site. Every time you edit or add a post, the sitemap will modify itself.

• Click here for Google XML Sitemaps plugin.

• Now go to Google Webmaster Central and log in with your Google Account. On the first page, there will be a link to “Verify” your site. Follow the instructions there.

• Once that’s done, you can then click the “Add Sitemap” link from the first page and put in the URL to your sitemap, which will be http://www.yoursite.com/sitemap.xml

1/29/2015Everything WordPress by Eric Myers @

PCAZ21

Page 22: Everything WordPress

• 7. Install WordPress Database Backup

• Always good to have a backup in place. Things may go wrong with your server, or you could even make a mistake yourself.

• WordPress Database Backup will backup your WordPress blog, and you can even set it so it will email you a backup on a weekly basis, so you don’t have to do anything yourself but activate it.

1/29/2015Everything WordPress by Eric Myers @

PCAZ22

Page 23: Everything WordPress

• 8. Test Your Blog With Dummy Content• You’ll not know what your blog will truly look like until you have thoroughly tested

it with multiple posts and all types of formatting applied.• Import the sample post collection (Tools > Import > WordPress) and your blog will

compile with sample posts including comments, parent/child categories and formatting, allowing you to thoroughly test it and make any theme alterations.

• 9. Add your RSS feed to Feedburner• First edit your RSS settings. Settings > Reading and you can edit how many posts

you want to show in your RSS feed and whether they should show the full post or not.

• Now you want to burn your feed with Feedburner. Feedburner will provide you with stats on your feeds and automatically ping services so your new content is updated immediately along with a whole host of other services.

• Once you have signed up to Feedburner, change your feed subscription link in your theme. Place the following code between the head tags.

• <link rel="alternate" type="application/rss+xml" title="Feed Title" href="YOUR FEEDBURNER URL"

1/29/2015Everything WordPress by Eric Myers @

PCAZ23

Page 24: Everything WordPress

• 10. Activate your Analytics

• Keep track of your users and traffic. I recommend Google Analytics.

1/29/2015Everything WordPress by Eric Myers @

PCAZ24

Page 25: Everything WordPress

• 11. Protect your plugins

Plugins are an easy way for a hacker to get access to your blog if they’ve got flaws in them. An easy way for hackers to find out which plugins you’re using is to go to /wp-content/plugins/, and they’ll find all the plugins that you’re using. The solution? Put a blank index.html file in the wp-content/plugins/ folder.

• 12. Update WordPress

This is super-easy to do, but a surprising number of people don’t do it: update WordPress. If you’re super-security-conscious then don’t upgrade to the next big release immediately (ie 2.8), wait for the bug fixes to come in (ie wait for 2.8.1).

• 13. Pick a good password

`Common sense. Use a good password. Don’t use the same password that you use on every site, create something that is easily memorable, with a mix of UPPER and lower case and some numbers in there too. Change your password regularly too.

• 14. Change the admin user name

`By default, the WordPress user name is admin. [Lots]% of people don’t change it. Why should you change it? If a hacker has your username, he’s halfway there to getting into your site, he just has to guess your password. If the hacker has to guess your username as well, then that’s twice as much work to do. It’s super easy to migrate posts from one user to another, just create your new user and then delete the admin user. You’ll be given the option to migrate posts to another user.

• 15. Protect your WP-Config.php file

Your WP-Config.php contains your database name, database username and database password. It’s something to protect.

Just add the following code to your .htaccess file:

# protect wpconfig.php order allow,deny from NerdEnvy - nerdenvy.net1/29/2015Everything WordPress by Eric Myers @

PCAZ25

Page 26: Everything WordPress

• 16. Hide your WordPress version

First off, go into your header.php file and remove the meta data (something like <meta name=”generator” etc). Trouble is, WordPress adds in the meta data automatically! How do you remove it? Paste this code into your functions.php file.

<?php remove_action('wp_header', 'wp_generator'); ?>

• 17. Limit the number of times user can enter their password (wrongly)

The Login LockDown plugin will lock out users if they enter their password wrong too many times. You can choose how many times users can enter their password and also how long they’re locked out for via a neat options page.

• 18. Limit WP-Admin access by IP

This isn’t something that I do personally, as I blog on a fair number of different computers, but if you’re just on the one, with a fixed IP, then this is a great hack for you: you can restrict access to the wp-admin directory with a spluginimple .htaccess hack:

• order deny, allow allow from a.b.c.d. #your static ip deny from allSource – Nometech

• 19. Login via SSL

If your host has an SSL certificate then you can use this great little plugin to login via SSL. The Admin SSL plugin “secures login page, admin area, posts, pages – whatever you want –using Private or Shared SSL.”

1/29/2015Everything WordPress by Eric Myers @

PCAZ26

Page 27: Everything WordPress

Don’t Do’s For WordPress…

1/29/2015Everything WordPress by Eric Myers @

PCAZ27

Page 28: Everything WordPress

• Not using self-hosted WordPress: Yes, there are easier, simpler, quicker ways to get a blog fired up. But none of those easier paths will give you the control you will require later on. I don’t mean to imply self-hosted WordPress is the only way to go. It’s not. But if you’re new to blogging, and you want to do this for business, the learning curve is worth it. Trust me, after you’ve been blogging for even a short time, you’re really, really going to want to be able to tweak some things, optimize your site and take things to the next level, and if you’re on a platform that doesn’t give you that control, your creativity is going to be stifled. That’s not a good thing. If you want to skip the learning curve altogether and just get a rocking professional blog site up without a hassle, just hire me to do it for you.

1/29/2015Everything WordPress by Eric Myers @

PCAZ28

Page 29: Everything WordPress

• Using Pirated WordPress Theme;It's not difficult to find a pirated WordPress theme on torrents

and download it for use but the thing to ask is are those themes really worth using. Mostly these files contain some Malware or virus in it or link to some bad network which may be hidden from you. These malwares are designed to harm your website and leech unnecessary bandwidth or cause some other kind of malfunctioning to your website. If your web hosting company notices any malware in your hosting account they terminate your account instantly and in many cases without any notice. Trying to save a few bucks can really cause a big damage to your blog. I hope you are not making this mistake.

• Running Your Blog On Old WordPress Version; It's never safe to run a blog on outdated WordPress versions as

it's a delight for hackers because they know the loopholes in the old WordPress versions and can use them to harm your blog. It's always smart thing to keep your WordPress blog updated to latest version.

1/29/2015Everything WordPress by Eric Myers @

PCAZ29

Page 30: Everything WordPress

• Using Unnecessary WordPress Plugins

Don't fill up your plugins section with lots and lots of plugins which may not be useful to you. Using a plugin just because someone else is using is not really a thing to follow this applies for plugins apart from security plugins but also don't be too obsessed with collecting security plugins and installing each and every plugin blindly.

Revise your blog needs and choose your plugins according to that. More the plugins run on your blog more number of process will run which will put extra load on the server.

• Making Maintenance Changes To Your Live Blog

If you making changes to your blog while it's live and you have a decent blog traffic then it really irritate your readers due to any interruption or frequent changes to page which can effect a user's navigation. There is a maintenance WordPress plugin which you can use while your blog is undergoing maintenance. Your readers will read a message that will tell them that the site is down for maintenance, please check back in few minutes, which is think is far better than a user seeing different things every time the page is refreshed.

1/29/2015Everything WordPress by Eric Myers @

PCAZ30

Page 31: Everything WordPress

• Being Scared Of Experimenting On Your WordPress Blog

WordPress is one the simplest CMS platforms available. Technology is changing everyday and you cannot be stagnant with your blog. If you are new to WordPress then I would suggest you to learn more about WordPress and start applying those things which you read, this will help you in understanding WordPress better. When you will try new things with your blog it will help you only make your blog better.

• Using The Default WordPress Theme

Too lazy to use a custom theme for your blog. Well people won't be too exited either in visiting a blog where a blogger can't even use a custom theme for his blog. There are hundreds of free WordPress themes out there and it only takes few minutes to upload and apply the theme.1/29/2015

Everything WordPress by Eric Myers @ PCAZ

31

Page 32: Everything WordPress

Top 19 Plugins

1/29/2015Everything WordPress by Eric Myers @

PCAZ32

Page 33: Everything WordPress

• SEO Smart Links – This SEO-friendly plugin can automatically link keywords and phrases to related comments, posts, pages, and categories within your site. This makes less prominent pages or older content more relevant and crawl-able for search engines, and keeps site visitors engaged. It also lets you set “nofollow” tags on URL’s and create custom keyword lists with automated URL hyperlinks for individual terms.

• I Love Social Bookmarking - I.L.S.B. is a great way to encourage blog readers to rank your post on popular social media sites. In the past year, sites like Digg, Delicious, StumbleUpon, and Sphinn have become major resources for driving relevant traffic to quality site content. This plug in inserts an attractive drop-down menu next to your blog posts that allows readers to submit or rank your site content on a number of popular social media sites, without leaving your blog.

• WP to Twitter —Twitter is an ideal space for (viral) content sharing since users are constantly engaged in niche conversations. Now that Google’s Social Search indexes tweets at the top of SERP’; more tweets/retweets = more indexing power. WP to Twitter is a plugin that automatically tweets a tiny URL link to new blog posts or blog edits on your site. Without any additional effort, your content is distributed to a relevant, willing audience; this can drive relevant traffic and increase your presence in social search results.

1/29/2015Everything WordPress by Eric Myers @

PCAZ33

Page 34: Everything WordPress

• WP-Super-Cache —This plug in contributes to your site speed and it helps your blog load faster. The number of pages on your blog that a search engine will index on a daily basis increases with speed. If indexing each page is a quicker endeavor, more pages will be indexed. WP-Super-Cache creates static html pages from your WordPress blog so your server will present this file instead of the much denser PHP script. This will also help fortify your server when it is receiving a high amount of traffic, which can result from all your other great SEO strategies! This is because this plug in serves a static html page to 99% of your site visitors.

• Robots Meta — Robots Meta automatically inserts “nofollow” tags on internal site links that are irrelevant to search crawlers; this keeps search engines from wasting time indexing unimportant pages like results, login, and admin pages, instead directing crawlers to index primary site content.

• SEO Slug — Blog post titles typically get an h1-h3 heading, which makes them very important in terms of keyword optimization. SEOSlug optimizes blog post titles to improve search engine visibility by editing keyword strings. It removes conjunctions from titles, (words like “as” and “if”) to allow crawlers to more readily crawl main content keywords as a fluid string.

1/29/2015Everything WordPress by Eric Myers @

PCAZ34

Page 35: Everything WordPress

• Akismet – Akismet is the comment spam fighter that comes built into WordPress and it does a mighty fine job. Activate this plugin and you won’t need to moderate or captcha your comment submissions. Akismet does 99% of the work for you.

• WPtouch iPhone Theme – This plugin allows you to instantly and effortlessly transform your website into a mobile paradise. Whenever a mobile user accesses your blog a pleasant looking lighter version designed specially for mobile devices is presented. This is a must have for 2010.

• Backtype Tweetcount – If you’re using the TweetMeMe tweet counter badge on your blog then kill it right now. Nobody wants to authorize another program to access their Twitter account just to share a link to your site.

1/29/2015Everything WordPress by Eric Myers @

PCAZ35

Page 36: Everything WordPress

• Nofollow Case by Case – This site’s comment links are dofollow. I’ve stripped out all of the nofollow tags from the comment section of Site Sketch 101. You leave a comment here and Google page rank will chase you all the way back to your site. This plugin is what makes that happen. So leave a comment here and then install this awesome WordPress Plugin at your blog.

• WP-DBManager – This little gem is amazing for backing up your website. It actually has quite a few functions that it can perform but perhaps it’s most impressive feature is it’s ability to email the entire WordPress database to me every day.

• Thank Me Later – This plugin is great. It sends an email to all first-time visitors. You can write up the email to remind them about your RSS feed or just to invite them to connect with you personally. I do both.

• WP-PageNavi – Those ‘Older Posts’ and ‘Newer Posts’ links are boring. With WP-PaveNavi you can get page buttons so users can go directly to whichever page they want. Plus they look a lot better than plain little links.

1/29/2015Everything WordPress by Eric Myers @

PCAZ36

Page 37: Everything WordPress

• Permalinks Moved Permanently – Last year I moved all of my permalinks to post the page so that they wouldn’t be so long. This would have meant that all of the links to my posts would generate 404 errors. This plugin just forwards all the links and PR to the new addresses.

• SEO Slugs – Using your entire post title as the slug for the article can make web addresses long and it can waste the opportunity to focus on using your keywords. This plugin strips out all the unnecessary words from the permalink for you so that you don’t have to.

• SEO Smart Links – Do you inter-link your articles? You should. Linking within an article to other articles is a great way to build Page Rank throughout your site and it’s a great way to get readers to find your other articles on similar subjects. This plugin will interlink keywords to your other articles for you.

• Subscribe to Comments – This plugin took a little bit of work to get it to work right but it’s great because it allows people to subscribe via email to any other comments that show up on a given post. This helps get readers to keep coming back.

• Top Commentators Widget – At the bottom of the sidebar here, you can see the top 10 commentators for this month. This is a great way to provide a dofollow link back to the people who help make your site great.

• WordPress Related Posts – If a reader enjoys one of your articles then one of the best things that you can do is to put some more articles in front of them to keep them digging through your site.

1/29/2015Everything WordPress by Eric Myers @

PCAZ37

Page 38: Everything WordPress

• Simple Feed Copyright: Adds a simple copyright notice at end of full text articles in your feed. A notice gets attached at the bottom of feed articles.

• Subscribe Me: The Subscribe Me plugin will add buttons that let your visitors share your content on social media sites such as Bloglines or Google Reader.

• Subscribe2: Subscribe2 provides a comprehensive subscription management and email notification system for WordPress blogs that sends email notifications to a list of subscribers when you publish new content to your blog. Plaintext excerpt, plaintext full post or HTML full post.

• What Would Seth Godin Do: This plugin requires cookies. Users without support for cookies will always see the new visitor message. New visitors will appreciate some context and background information about your site. This is your chance to offer them a special welcome and invite them to become permanent subscribers.

• Subscribe-Remind: some text will automatically be placed at the end of each of your posts inviting your readers to subscribe to your RSS feed.

• Recommended Reading: Google Reader Shared: The "Recommended Reading" plug in is the easy way to do it! All you need is a free Google Reader account. It includes an easy to use configuration panel inside the WordPress settings menu.

1/29/2015Everything WordPress by Eric Myers @

PCAZ38

Page 39: Everything WordPress

Plugins

1/29/2015Everything WordPress by Eric Myers @

PCAZ39

Page 40: Everything WordPress

• Advanced WYSIWYG Editor – adds more editing options to the WYSIWYG post editor. See it below

1/29/2015Everything WordPress by Eric Myers @

PCAZ40

Page 41: Everything WordPress

• Ever wanted to see how a plugin would interact on your site before activating it? Plugin Test Drive was written for just that purpose. You can test it out to see how it looks on your site and configure it properly before making it publicly activated for your visitors.

• How does it work?

• Plugin Test Drive works by conditionally activating the plugin based on user name or IP address. Use the IP address option if you’re testing plugins that are intended for unregistered visitors only. Select username for testing plugins that work mainly with registered users.

1/29/2015Everything WordPress by Eric Myers @

PCAZ41

Page 42: Everything WordPress

• WordPress Firewall SEO – This is the one that I use. I like the fact that it sends me emails with details of the attack and the attacker’s IP address, as well as blacklist & whitelist capability. It also has a set of hard-coded criteria that it rejects and prefitted whitelist to make it work out-of-the-box.

• http://www.seoegghead.com/software/wordpress-firewall.seo

• WP Security Scan –Scans your WordPress installation for security vulnerabilities and suggests corrective actions.Google Analyticator: Google Analyticator adds the necessary JavaScript code to enable Google Analytics logging on any WordPress blog. http://wordpress.org/extend/plugins/google-analyticator/

• Contact Form 7: Can manage multiple contact forms, plus you can customize the form.

• http://wordpress.org/extend/plugins/contact-form-7/

1/29/2015Everything WordPress by Eric Myers @

PCAZ42

Page 43: Everything WordPress

• 8 Backstage Plug-ins:• WP Super Cache:This plugin generates static html files from your dynamic WordPress blog. After a

html file is generated your webserver will serve that file instead of processing the comparatively heavier and more expensive WordPress PHP scripts.

• Wp-SlimStat: you can see detailed stats of your WordPress blog. It also filter details and stats using the filter form inside Details panel.

• Google Analytics and Feedburner Reports plugin for WordPress: allows you to easily view your Google Analytics and Feedburner reports in your WordPress administration area.

• Download Monitor: plugin for uploading and managing downloads, tracking download hits, and displaying links. The whole idea to this plugin is to keep your website downloads organised, and provide means to monitor the amount of downloads a file has, along with an easy method of linking to those files using its own tags.

• cforms: offering convenient deployment of multiple contact forms throughout your blog or even on the same page. The form submission utilizes AJAX, falls back, however, to a standard method in case AJAX/Javascript is not supported or disabled.

• StatPress: the real-time plugin dedicated to the management of statistics about blog visits. It collects information about visitors, spiders, search keywords, feeds, browsers etc.

• Ozh' Admin Drop Down Menu: all admin links available in a neat horizontal CSS driven drop down menu. No need to click on "Manage" then "Pages" to edit pages, go to any admin page from any admin page.

• Excerpt Editor: Excerpt Editor provides a convenient place for creating and editing all excerpts. It can also add custom excerpts for pages (not possible without a plugin).

1/29/2015Everything WordPress by Eric Myers @

PCAZ43

Page 44: Everything WordPress

• With .htaccess you can do so many things, but the risky part is almost all the time you need to edit your .htaccess file manually. However, now there is a special htaccess wp plugin for WordPress blogs that does so many things (full features are below the screenshot). All you need is “enable” a particular feature and it will rewrite your .htaccess file automatically.

• Full Features• Directory Protection

Enable the DirectoryIndex Protection, preventing directory index listings and defaulting. • Password Protect wp-login.php

Requires a valid user/pass to access the login page• Password Protect wp-admin

Requires a valid user/pass to access any non-static (css, js, images) file in this directory. • Protect wp-content

Denies any Direct request for files ending in .php with a 403 Forbidden.• Protect wp-includes

Denies any Direct request for files ending in .php with a 403 Forbidden. • Common Exploits

Block common exploit requests with 403 Forbidden. • Stop Hotlinking

Denies any request for static files (images, css, etc) if referrer is not local site or empty.

1/29/2015Everything WordPress by Eric Myers @

PCAZ44

Page 45: Everything WordPress

• WP Vivtiger Image ResizerAllows users to crop and resize an image easily using the WordPress attachment system. http://wordpress.org/extend/plugins/vivtiger-image-resizer/

1/29/2015Everything WordPress by Eric Myers @

PCAZ45

Page 46: Everything WordPress

SEO

1/29/2015Everything WordPress by Eric Myers @

PCAZ46

Page 47: Everything WordPress

• 3 SEO Plug-ins:• All in One SEO Pack : Automatically optimizes your

WordPress blog for Search Engines (Search Engine Optimization). Optimizes your WordPress blog for Search Engines (Search Engine Optimization).

• Google XML Sitemaps: This plugin will generate a sitemaps.org compatible sitemap of your WordPress blog which is supported by Ask.com, Google, MSN Search and YAHOO. This is a must have if you want your blog to move up on the Google index. Highly recommended.

• No Self Pings: Prevents WordPress from sending pings to your own site, for example there are times when you want to link directly related articles like Part 1, Part 2, by default site will get pinged by itself.

1/29/2015Everything WordPress by Eric Myers @

PCAZ47

Page 48: Everything WordPress

• mod_pagespeed is an open-source Apache module that automatically optimizes web pages and resources on them. It does this by rewriting the resources using filters that implement web performance best practices. Webmasters and web developers can use mod_pagespeed to improve the performance of their web pages when serving content with the Apache HTTP Server.

1/29/2015Everything WordPress by Eric Myers @

PCAZ48

Page 49: Everything WordPress

• HeadSpace 2: WordPress SEO Made Simple-Move over All in one SEO. There’s a new guy in town. HeadSpace provides you with the features you need to drive your site to the top. People spend way to much time working on SEO and too little time writing great content. This plugin let’s you put your focus back where it belongs. It takes care of all the SEO work that your blog will need.

1/29/2015Everything WordPress by Eric Myers @

PCAZ49

Page 50: Everything WordPress

• HeadSpace2 is an all-in-one meta-data manager that allows you to fine-tune the SEO potential of your site. Visit the HeadSpace page for a video demonstration.

• You can configure meta-data for:• Posts Pages Categories Home page Author pages Search pages 404 page You can define: Tags/keywords, with

suggested keywords Descriptions Page titles Custom 'more text‘ Site name and site description Custom themes -change your theme on each page! Custom plugins - load a plugin only on specific pages Additional CSS and JavaScript files Noindex and nofollow meta tags Follow/follow on archive, category, page, tag, and comment links It also allows you to add: Google Analytics Google Webmaster Google section targeting Mint statistic 103beesStatcounter CrazyEgg heat map Feedburner Stats Pro Apture Yahoo! Site Explorer Microsoft Live Verification HitTailPiwik tracking AWStats tracking

• You can also:• Disable visual editing• Disable widgets• Configure first-time visitor messages• Add frame-breaker code• Disable WordPress auto-formatting (wpautop and wptexturize)• Configure memory limits, error reporting, and system timeouts• This is all included in a single plugin. Because of the large number of other meta-data plugins, HeadSpace provides

an import function for the following plugins:• Ultimate Tag Warrior• All-in-one SEO• HeadMeta Decription• Jerome's Keywords• lud.icro.us Head Meta• SEO Title Tags• Simple tagging

1/29/2015Everything WordPress by Eric Myers @

PCAZ50

Page 51: Everything WordPress

Themes

1/29/2015Everything WordPress by Eric Myers @

PCAZ51

Page 52: Everything WordPress

Lalalalala, ok…

There mare many themes, my favorite is Platform Pro by Pagelines,

who make AWESOME THEMES

1/29/2015Everything WordPress by Eric Myers @

PCAZ52

Page 53: Everything WordPress

Security

1/29/2015Everything WordPress by Eric Myers @

PCAZ53

Page 54: Everything WordPress

• 5 Security plug-ins• WordPress Database Backup:WordPress database backup creates backups of

your core WordPress tables as well as other tables of your choice in the same database.

• Semisecure Login: The Semisecure Login plugin for WordPress increases the security of the login process by using client-side MD5 encryption on the password when a user logs in.

• WP-SpamFree Anti-Spam: An extremely powerful WordPress anti-spam plugin that eliminates blog comment spam, including trackback and pingback spam. Finally, you can enjoy a spam-free WordPress blog! Includes spam-free contact form feature as well.

• SI CAPTCHA Anti-Spam: dds CAPTCHA anti-spam methods to WordPress on the comment form, registration form, login, or all. In order to post comments or regiser, users will have to type in the phrase shown on the image.

• User Locker: This plugin closes this security hole by introducing maximum number of invalid login attempts. When someone exceeds this number, his/her account becomes locked, and can be unlocked only by requesting new password (using Lost Password option) or asking Admin for help (he/she can do it too).

1/29/2015Everything WordPress by Eric Myers @

PCAZ54

Page 55: Everything WordPress

• WP Security Scan

• This very easy to use plugin will sort out some of the basic security issues with WordPress –it’ll change your database’s name and alert you to flaws in your installation’s security, amongst other features.

1/29/2015Everything WordPress by Eric Myers @

PCAZ55

Page 56: Everything WordPress

Questions?

• @ericjmyers

[email protected]

• http://www.nerdenvy.net

1/29/2015Everything WordPress by Eric Myers @

PCAZ56