Best Practices for WordPress Site Management

Methods and tools to manage your own WordPress sites as well as WordPress sites for your clients.

Transcript

1. BEST PRACTICES FOR WORDPRESS SITE MANAGEMENT
2. AKA  AVOIDING  A   WORDPRESS  ARMAGEDDON  
3. WHO  AM  I?   •  WordPress  Lover     •  Founder  of  WP  Site  Care   •  @ryandonsullivan  on   twi8er  the  social  network.   •  wpsitecare.com   •  Once  met  Charles  Barkley   •  Obsessive  about  amazing   customer  support   RYAN SULLIVAN
4. GETTING  STARTED   WITH  WORDPRESS  
5. “WORDPRESS   IS  EASY”  
7. What  Makes  WordPress  Run?   •  Server  Hardware  (your  web  host)   •  Linux  (or  Windows  if  you’re  a  masochist)   •  PHP  –  The  Magical  Code  That  Makes  it  Run   •  MySQL  –  Your  Database   •  A  web  server  –  Apache  or  Nginx  are  best   •  CSS  –  If  you  want  your  site  to  look  pre8y   •  Javascript  –  most  likely  
8. START  LEARNING!  
10. BACKING  UP   WORDPRESS  
11. PROTECTING   YOUR  SITE  IS   YOUR  JOB!  
12. OFFSITE  BACKUPS   •  Download  from  your  host  manually   •  cPanel  Backups   •  WordPress  Backup  to  Dropbox   •  BackupBuddy  integrates  with  Amazon  S3,   Dropbox,  Rackspace  Cloud,  Email,  Stash,  or   even  FTP   •  VaultPress  
13. STAYING  SECURE  
14. WHAT’S  THE   NUMBER  1  RULE   FOR  SECURING  A   WORDPRESS  SITE?  
15. BACK  UP   WORDPRESS  
16. It’s  when,  not  if  
18. UPDATING  WORDPRESS   •  Backup  WordPress  (are  you  seeing  a  trend?)   •  Always  keep  plugins  and  themes  current   •  Keep  records  of  changes  –  server  logs,  audit   trails   •  Test  Locally   •  Staging  or  cloned  site   environment   •  Deploy  changes     •  Say  a  short  prayer  
19. RESTRICT  ACCESS   •  HTTP  Authen\ca\on   •  Limit  Login  A]empts   •  Secure  Transmission  (Force  SSL  on  admin)   •  Restrict  IP   •  2-­‐Factor  Authen\ca\on   •  Use  SFTP  not  FTP   •  Don’t  store   FTP  passwords    
20. HARDEN  WORDPRESS   •  Set  proper  file  permissions   •  Use  secret  keys  in  wp-­‐config   •  Don’t  use  default  database  prefix   •  Block  direct  access  to   WordPress  directories   •  Disable  file  edi\ng  in  the   admin  panel  
21. CODE  CONTROL  
22. VERSION  CONTROL   •  Quick  rollbacks   •  Quick  updates   •  Easy  to  maintain   •  Easy  to  allow  addi\onal  contributors   •  Addi\onal  form  of  redundancy  
23. SCALING   MANAGEMENT  
24. MANAGING  MULTIPLE   SITES   •  One  click  updates  across  many  sites   •  Easy  upgrades   •  Mange  backups   •  Easy  admin  access   •  Site  monitoring   •  Quick  code  deployment  
25. THANK  YOU   @ryandonsullivan   www.wpsitecare.com