WordPress Optimization & Security - LAC 2013, London

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

Publicité

WordPress
Optimization & Security
London Affiliate Conference
February 2013

http://gd...

About me

SEO Trainings, Seminars & Strategy Consulting

WordPress Security, Consulting & Development

...

Get the Slide-Deck

http://gdig.de/lac13

3

Who is running WordPress?!

See… that‘s the issue!
It’s the “hackers” most-loved target!

Section #1: Security

#1 Never EVER do this!

These sites are
more than worse…

A quick peak into some theme files…

LOL! „family friendly“
links – my a*s…

...

A quick peak into some theme files…

functions.php: This theme
won‘t be working without
...

#2 Always use TAC to do a pre-check!

Theme Authenticity
Checker (TAC)

...

It get’s worse: base64 encoded footer

Are you really sure you want
to see that footer....

Right… NICE FOOTER!

12

If you are REALLY curious…
 http://ottodestruct.com/decoder.php
 http://www.tareeinternet.com/scripts/byterun.php
 ...

PLEASE… stay away
from “free” WordPress
themes – they’re not
free, really!

#3 Keep your installation clean

Remove all non-active
plug-ins as well as themes!

...

#4 Do updates regularly!
 WP Updates Notifier to get emails
on out-dated components (core,
themes & plug-ins) for all...

#5 Daily scan your Theme

WP AntiVirus

http://wordpress.org/exten...

Register now!
Really, it’s free!

http://bluemonitor.net/en/

#6 Harden your Security Settings

Secure WordPress

Most important: Rem...

#7 Protect wp-admin by .htaccess

Put an .htaccess to your
/wp-a...

#8 Fix File & Folder Permissions

WP-Security Scan

Very important: chmod your
wp-c...

#9 Moving the “wp-content” folder

define('WP_CONTENT_DIR', $_SERVER['DOCUMENT_ROOT'].'/blog/my-wp-content');

...

#10 SSL Logins & Administration

define('FORCE_SSL_LOGIN', true);

Set FORCE_SSL_LOGIN t...

BTW: How to do it?

Just find this
beast…

… don’t use thi...

Section #2: WordPress SEO

#11 WordPress SEO by Yoast

Make sure to uncheck this!
Enables setting noind...

#11 WordPress SEO by Yoast

You surely don‘t need paged
archives...

#11 WordPress SEO by Yoast

Set proper page title &
description, also choose
...

#11 WordPress SEO by Yoast

Use help section to get
...

In addition: Post-level settings

You can overwrite defaults
on a per-pos...

#11 WordPress SEO by Yoast

Usually you just need one
(unless having a HUGE
...

#11 WordPress SEO by Yoast

Especially w/ single-authored
blogs, those are a 1:1 copy...

#11 WordPress SEO by Yoast

For larger sites, check to auto-
generate XML ...

#11 WordPress SEO by Yoast
Make absolutely sure
you‘re using these!

BTW: Clean those URL-Slugs

WP Permalauts

Especially important for
...

#11 WordPress SEO by Yoast

Trust me… things change!

Check out SEO data transporter
to switch SEO plug-ins!

Migration made easy: Painless switching!

SEO Data Transporter

http://word...

Section #3: Plug-ins

Credits: http://bit.ly/T8wMwO

Make absolutely sure you only
use plug-ins from trusted authors!

#12 Fix your Pagination

Better crawl-ability, better WP-PageNavi
indexation – what else u want?

...

#13 Improve internal Cross-Linking

Yet Another Related
...

#14 Auto-optimize Image Attributes

SEO Friendly Images

Forces pos...

#15 Redirect old Contents

Redirection

http://wordpress.org/e...

#16 Mask your Affiliate Links

Eclipse Link Cloaker

http://eclip...

Don’t forget to tweak your robots.txt

We don‘t want some WP
User-Agent: * spec...

#17 Have Rich-Snippets if possible

Schema Creator

http://wordpress.o...

#18 Fix your Internal Search

Relevanssi Search

http://wordpress.org/...

If you make it multi-lingual…

WPML

http://wpml.org/

Section #4: Mobile

#19 Make it work on Mobile Devices

WPtouch

http://wordpress.o...

Or try: WordPress Mobile Pack

Mobile Pack

Contains...

Section #5: Maintenance
53

#20 Do a Theme Test Drive

Live-Testing a new theme
without anyone else...

#21 Debug your WordPress

P3 (Plugin Perf. Profiler)

http://wordpress.org/extend/plu...

#21 Debug your WordPress

P3 (Plugin Perf. Profiler)

http://wordpress.org/extend/plu...

#21 Debug your WordPress

P3 (Plugin Perf. Profiler)

http://wordpress.org/extend/plu...

#21 Debug your WordPress

Debug Objects

http://wordpress.org/extend...

#22 Enable Akismet

Just enable, get an API key
and turn „auto-delete“ on!

#23 Backup Database & Files

BackWPup

http://wordpress.org/ex...

#24 Watch out for Errors
 Knowledge is power
 Use a 404 logger
...

#25 Maintain Categories & Tags

Term Mgmt. Tools

Mass merge &
change parents

...

Section #6: Performance

Scoring domains by
performance; check it out!

https://developers.google.com/pagespeed/

#26 Compress those Images

13.2% savings WP Smush.it
for one image!

...

Or try this one - if you don’t like Yahoo…

Run‘s awesome CW Image
image optimiza...

#27 Setup a Caching Plug-in

W3 Total Cache

http://wordpress.org/...

#28 Combine multiple CSS files
 Combine CSS files into one to
reduce the number of HTTP requests
 Minify the big file ...

#29 Do CSS-Sprites

http://spriteme.org/

#30 Off-load JS-Libs

WP Use Google Libraries

Simply enable the plug-in &
...

How to make your site lightning-fast…

http://gdig.de/smxspeed

71

OMCap 2011 - Online Marketing Konferenz Berlin

And that’s it! …
13.10.2011
Wai...

If you’re into automation…

Auto Poster

http://www.nextscri...

Thanks! Questions?
mail@grimm-digital.com
twitter.com/basgr
linkedin.com/in/bastiangrimm
facebook.com/grimm.digita...

Partager Slideshare

LinkedIn
Facebook
Twitter

Intégrer

Taille (px)

Afficher les Slideshows associés à la fin

Code abrégé pour WordPress

Lien

Partager
E-mail

interne Verlinkung - SEO-Campixx 2013 by Holger Etzel 5804 views
11 Crazy Marketing Statistics by HubSpot 117073 views

Afficher sur Slideshare

1 sur 75 Publicité

Afficher sur Slideshare

1 sur 75 Publicité