The Ultimate WordPress Security Guide – Step by Step (2017)

WPBeginner, a website for beginner guides to WordPress, has published an updated and comprehensive guide to WordPress security – “The Ultimate WordPress Security Guide – Step by Step (2017)“.  Most of the things are well known to seasoned WordPress users – keep things updated, use strong passwords, remove unnecessary plugins, make sure to pick the right hosting, add security enhancing plugins, etc.  But it’s a good place to start for  people who are not too technical and those who don’t think about security implications of having a publicly accessible website on a daily basis.

There are plenty of questions, answers, simple explanations, and links to other resources in the article.  So even if you are an experienced WordPress user, you might find a useful thing or two in there.

You might also want to checkout my earlier blog posts:

WordPress now powers 27.1% of all websites on the Internet

wordpress-market-share

WordPress Tavern states:

WordPress now powers 27.1% of all websites on the internet, up from 25% last year. While it may seem that WordPress is neatly adding 2% of the internet every year, its percentage increase fluctuates from year to year and the climb is getting more arduous with more weight to haul.

Linking to these statistics from W3Techs.  Impressive!

Those who think that WordPress is just a blogging system are far from the truth…

Automattic and .blog domains

I was very excited when six years ago Automattic, the company behind WordPress, became a domain registrar.  Registering, renewing, and managing domains is still a painful process today as much as it was six years ago.

So, what have the company decided to do with its new super power? Well, they’ve integrated domain registration with their WordPress.com hosted blogging service.  And now they are promoting the new .blog domains:

Millions of short, easy to remember domains will be available when the .blog domain goes live November 21. Apply now to secure the perfect domain for your blog.

This sounds cool, until you check the prices.

leonid.blog

30 EUR per year is not cheap.  But an additional 220 EUR early application fee on top of it makes it a no deal for me.  I wonder how many bloggers out there will go for this.

I understand that managing a top level domain is not an easy thing to do.  Everything from infrastructure to technical support costs money.  But at those prices, I think I’ll wait until the technology gets cheaper.  Because it inevitably will.

15 Year Blog Anniversary

blogging

Today is the 15th anniversary of this blog.  As most of you know, 15 years in technology is forever.  15 years on the web is even more so.  Here are a few highlights to give you a perspective:

  • First post dates back to October 26th 2001.  It wasn’t my first blog post ever.  It’s just that the earlier history wasn’t migrated into the current archives.
  • Archives page provides access to posts of every month of every year, except April and May of 2009, which were lost during a major outage at a hosting company at the time.
  • The blog survived a multitude of migrations between blogging applications and their versions (static HTML diary, Nucleous CMS, Blog:CMS, WordPress), design changes (a dozen or so WordPress themes), and hosting companies (from a home server to the current Amazon AWS setup).
  • Way over 8,000 posts written.  Hundreds of comments, pingbacks and trackbacks received.  These varied across a large number of topics, anything from personal, work, technology, movies, photography, Cyprus, and more.
  • Millions of page views.  Hundreds of thousands of unique visitors.
  • Millions of blocked SPAM comments.  Millions of (mostly automated) attacks, varying from SQL injections and dictionary password attacks to a some more advanced techniques targeting particular pages or WordPress and its plugins vulnerabilities.
  • A variety of content reorganizations – posts, pages, categories, tags, short codes, templates, plugins, widgets, links, etc.
  • A variety of integrations – web services, social networks, automated postings, aggregations, etc.
  • A variety of monetization options – from “this is not for profit”, to ad spaces, to contextual ads, to sponsored content.

Have a look at some versions saved by the Internet Archive, dating back to 2004.

So, what have I learned about blogging in the last 15 years?  Quiet a bit, it turns out.  Here are a few things that I think are important enough to share:

  • If you don’t have your personal blog yet, go and start now.  It’s well worth it!
  • Make sure you own your content.  Social networks come and go, and when they go, chances are, all your content goes with them.
  • Don’t stress too much about the format, styling, and scheduling of your blogging.  If you do it long enough, everything will change – the topics you write about, how much and how often you write about them, how your site looks, etc.  Start somewhere and iterate.
  • Don’t go crazy with features of your blogging platform.  Sure, there are thousands of plugins and themes to choose from.  But all of these change with time.  When they go away, you will have to either support them yourself, move to newer alternatives, or loose them.  Neither one of those options is pleasant.
  • Things die.  They disappear and then they are no more.  That’s life. This happens.  Don’t worry about it.  Do your best and then move on.
  • Have fun!  It’s your personal place on the web after all.  Try scheduled posts to get into the habit.  Try planning to get a better idea of what you want to do.  But if it doesn’t work or becomes too difficult, move on.  As I said, it’s your personal place and you don’t owe anybody anything.  Do it for yourself.  Others will come and go.

Here is to the next 15 years! :)

beer

On Google+ success from 5 years ago

One of the benefits of having your own blog is all the archives that are accumulated over time.  Web services, platforms, and social networks come and go, and so does your content when you choose to use them.  But with your own piece of the Internet, you get to keep it all.

It’s always interesting to see what I was into and what I was thinking like years ago.  Especially when it comes to predictions and forecasting.  Especially with the technology, which moves so fast.

Here is, for example, something that I shared 5 years ago (to the day):  On how Google+ will succeed.  Now that never happened.  In fact, almost the opposite is happening:

Horowitz made a point to emphasize, once again, that Google+ isn’t going away. Instead, he reiterated that the company will be offering “a more focused Google+ experience.”

In other words, Google+ has a core set of users that really do enjoy using the service. “Google+ is quickly becoming a place where people engage around their shared interests, with the content and people who inspire them,” Horowitz said.

More specifically, Google plans to continue to offer new features in Google+ and move “features that aren’t essential to an interest-based social experience” into existing products.

This just tells you how “trustworthy” is my opinion on things…