Tighten up WordPress security with the Limit Login Attempts plugin

WordPress is a fantastic blogging and website platform used by millions of sites. As such, it’s an obvious target for hackers. That’s one reason why it’s very important to always keep your site up to date.

When a new version of WordPress or one of the plugins you use is released, install it right away. Fortunately, this is a super simple process, so it’s pretty easy to keep WordPress secure in this manner (many updates resolve bug fixes or security issues).

One big shortcoming

One big shortcoming of WordPress, however, is that it lacks the ability to limit bad login attempts. Most systems will prevent you from trying different passwords over and over again, as that’s a clear sign someone is attempting to hack in.

Enter the “Limit Login Attempts” plugin.

Limit Login Attempts fixes this problem. The plugin allows you to limit bad login attempts to an amount you specify. If that limit is exceeded, login attempts are prevented from that particular ip address for a specified period of time (which you configure). This will lock out the bad guys, but leave you with access to your site from any other ip address.

I’ve installed this on all my WordPress sites and have been surprised by the number of times it’s protected them. I get an alert each time an ip address is locked out, and they come along all too often. I’m glad I installed this, and recommend you install it on your WordPress sites.

Let’s be careful out there.

Photo credit: zipemfish

My WordCamp Presentation Video – Tom’s Top Ten Tips for Blogging with WordPress

Back in July, I spoke at WordCamp Boston. The slides have been up for a while, and now the video of my talk, along with all of the other talks at WordCamp Boston, are posted online.

My talk is embedded below. If you can’t see it there, use this link – Tom’s Top Ten Tips for Blogging with WordPress at WordCamp 2011.

Videos for all of the sessions can be found here. There is a ton of great content there, so bookmark that link for when you are able to set aside some time to learn more about WordPress.

I’m told the videos will ultimately be posted up on the official WordPress.tv site – which is another great resource to learn about WordPress from experts and users all around the country.

Thanks again to all the volunteers and organizers who made such a great conference possible, and for capturing it all on video!

My WordCamp Presentation: Tom’s Top Ten Tips for Blogging with WordPress

Here are the slides from my talk at WordCamp Boston yesterday. Thank you to everyone who came to my talk, I hope you enjoyed it and found at least one tip that is useful to you.

For those of you who weren’t there, I hope these slides contain enough details to help you out as well. Some of the points covered broader topics for discussion, but some contain enough details on the slides that you should be able to find a plugin, widget, or configuration setting to help you execute the tip. At some point the video recording will be shared as well, and I’ll post that here too.

Website 101: Keeping WordPress Up To Date, Part 2

This is post #17 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Now that we have a WordPress website installed and the WordPress software up to date, we have to make sure all the other components stay up to date too.

Yes, even though we updated WordPress, we still have updates to perform. Why? Well, the power of WordPress comes from the vast array of little software add-ons that are available from programmers all over the world. Many of them are free or cheap, very easy to use, and very powerful. In order to take advantage of these add-ons, we need to do a little maintenance work.

Plugins

Plugins add a wide variety of features and functionality to WordPress. Things like adding a Facebook “like” button to your posts, adding the ability to track statistics on the number of visitors to your site and what content they like most, and automatically posting your content to Twitter are just some of the features than can be added via plugins with literally just a few clicks on your part.

So, all of these little addon programs, provided by different programmers, need to be kept up to date. The procedure is quite simple, and can even be done in bulk.

You may not always want to do this in bulk, but let’s go through the process this time to get a feel for it. This is pretty safe since the site has just been setup and is not yet “live.”

Click on the Updates menu option on the dashboard.

You’ll see a section on Plugins.

Click on “Select All” and then “Update Plugins.”

You’ll see a status screen like the following:

Themes

We looked at themes a while back. As you may recall, themes basically control the look, feel, and layout of your site. If your theme needs to be updated, you’ll see that on the dashboard too. And in the themes section:

The procedure is essentially the same, with one big exception. Themes control a lot, and often end up getting customized as your site evolves over time. As that happens, there may be certain settings and files that need to be backed up before updating a theme and then re-applied after the new theme is in place. That’s beyond the scope of this series – you’ll need to review the specific procedures for the theme you select.

Stay up to date

As you can see, the procedures to keep WordPress are very simple and straight-forward. Keep everything up to date to ensure that your site remains runs smoothly and remains secure.

This is post #17 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: Keeping WordPress Up To Date

This is post #16 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

As you work in WordPress, sooner or later you’ll notice a yellow notice bar appear across the top of the screen. WordPress is always checking to see if a newer version is available for you. If there is, this yellow bar is how it lets you know about it.

Updating WordPress is very simple. It’s totally automated and the update runs very reliably. And keeping up to date is important – many of the updates protect you from newly discovered security issues, fix other problems, or add new features.

On the dashboard screen below you’ll notice the yellow bar notice across the top, and also another tally of updates over on the left.

Click on the “Please update now” link. You’ll see the following screen.

The warning about backups is important, but we’ll cover that in a future post. Also, since we’ve just got a test environment running and the update process is known to run smoothly, let’s just go ahead and click the “Update Automatically” button. That’s the one you’ll use all the time. There’s not really a need to download the update first, so we might as well just have it installed automatically.

After you click the “Update Automatically” button, you’ll see a status screen like the following. The whole process takes just a minute, so you’ll see this pop up pretty quickly.

That’s it! You’re done. WordPress is now up to date and you can click on the “Go to Dashboard” link to bring you back to the dashboard.

When you get there, you’ll notice the “updates” count over on the left has been decremented by 1. Why isn’t is zero? Because there are other components to WordPress that get updated – third party plugins. We’ll cover updating these in a future post.

 

This is post #16 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: WordPress Menus

This is post #15 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Previously we setup some Pages to contain static content on our website. These were automatically added to the sites menu system, making navigation easy. That’s nice, but there isn’t a lot of control over the menu layout in this default mode. So, let’s take a look at the Menus option in WordPress.

WordPress Menus

WordPress menus allow great flexibility over your site’s menu system. Working in concert with your selected theme, the menus feature allows you to customize a lot of little details. And that’s important. Making your site navigation easy and intuitive is critical to a good design.

A simple example will start to make the power of the menu system, and WordPress, clear. The beauty of this bloggy sort of website platform is flexibility, a lot of which can be leveraged via the Categories and Tags feature we looked at previously. As we saw then, Categories and Tags are convenient ways to organize your site content. In addition to tag clouds and category lists, this flexibility can be surfaced directly on the menu system.

Setting up a menu

Let’s say the pet shop website we’ve been working on as an example wants to feature a How To section as an option off of the main menu navigation. By activating the Menus feature, we can accomplish this seamlessly.

To get started, click on Menus on the navigation pane of the WordPress Dashboard. Give your menu a name and click “Create Menu.”

Then, select that menu as your primary navigation.

Now, your automatically generated menu based on the Pages you created are gone. So let’s put them back.

Click on all the pages in the Pages box and click “Add to Menu.”

Notice that the items on your new menu can easily be re-arranged by dragging and dropping. Let’s change the order around a bit to make it flow more logically.

Now for the fun part. Let’s add the How To category as a menu item. Simply select it from the Categories list and click “Add to Menu.”

Once again, we can arrange the menu system by dragging and dropping. Let’s put the new How To option as the second to last choice.

After saving all those changes, we can see that the layout on the live website is just as we set it. Clicking on a menu items that point to a page brings up that page. Clicking on the How To menu selection brings up all posts that are in the How To category. This makes your content automatically appear where it is supposed to on the menu system simply by categorizing it properly.

Keep ‘em separated

Separating content from format is an important premise in making your website work well. As we saw previously with themes, the design, layout, and look and feel of your website can easily be modified without impacting the content. With menus, the navigation of your site (when planned out thoughtfully) can be automatically maintained – even for posts that fall into multiple categories. The possibilities are extensive.

This is post #15 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: WordPress themes

This is post #13 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Look and feel

So far we’ve been building content, and that’s the most important part of your site. Now we want to make sure that it’s presented nicely and in a style consistent with your brand.

Changing the look and feel, the style of your website, is easy with WordPress. WordPress supports themes, which are a nifty little tool to separate the layout, font selections, colors, and more from the content of your site as well as from the all the mechanics of basic website operations.

What does this mean? It means that you can completely upgrade your website’s look and feel in a few minutes, without doing any programming or design work. There are limitations to this approach, of course. Someday you’ll likely need to hire professional help to get things finely tuned to your needs. But for now, you can do an amazing amount on your own. For free and in just a few minutes.

Exploring themes

Click on Themes under the Appearance menu and you’ll see information on your current theme. The Twenty Ten theme is installed by default. It’s a nice looking theme and might be the right choice for your site. But let’s look around first.

To explore themes, click on the Install Themes tab. Here you get a few options to help sort through the overwhelming selection available – most for free – from the large and active community of WordPress developers.

I suggest browsing through Featured and Newest to get a sense of what the various themes look like. Once you’re more familiar with what a theme is and what differentiates one from another, the search function will be more useful.

Checking out a theme

When a theme catches your eye, click on Details to see more information. Here you can see how many times it’s been downloaded and what the average user rating for the theme is.

More interestingly, you can click the Preview link to get a sense of what a theme will look like once it’s installed. You’ll see samples of all sorts of things like different title styles and how it handles different types of lists.

Once you find a theme that looks interesting, install it. (Don’t worry, you can easily switch back to your original theme at any time.) Click on Install and then the Install Now button. You’ll see a status screen like this:

Here the Preview link takes on new meaning. A preview now will show you your site with your data in the preview. This can be handy once your site is live and you want to look at different themes. Since you haven’t launched this new site yet, you can simply Activate your new theme.

Options, options

Depending on the theme you selected, you may see some – or many – new theme-specific options displayed (or added to the WordPress menu bar on the left).

The variety of fine tuning available varies widely from theme to theme. You’ll notice that the differences allow greater control over things like the image displayed in the header of your site, the ability to control how many columns are displayed, and how customizable your menus can be.

This can get a little daunting, so I suggest that you try out several different themes. Get a sense of what a theme is. Explore the variety of design styles. Look at the different types of controls that are offerred. Put some time in, but don’t get stuck here either – remember, a theme can easily be changed any time.

A good approach is to sketch out what you’d like your site to look like. Where does your logo go? What other images do you want to display? How do you want your menus to work? What kinds of things do you want to put in your sidebar? Think through and sketch out as much as you can, and then try to make that vision work with different themes. You’ll find that some things are hard or can’t be done with certain themes, and you’ll find some that seem to fit more “naturally” with your vision for your site. Experiment.

This is post #13 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: Your first page

This is post #12 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

We’ve spent a lot of time on Posts, and that’s where you’ll spend a lot of time on your site. But pages are important too, especially in the beginning.

Pages are designed to change less frequently, and they have some nice automatic hooks into the menu system. For instance, in our sample site you may have noticed that WordPress installed a page by default, the About page. Clicking on About in the menu and it will bring up that page.

About

What’s it all about?

An About page is a great place to start working on the Pages of your site. You can edit it by clicking on the Pages link, and then on the Edit link underneath the page title (you can also just click on the page title).

Whatever your website is about – here’s the place to tell the tale. Be brief and to the point, provide bullet points on the highlights, and include testimonials if appropriate. It’s also good to add a picture on your About page. If this is a personal site, make it a nice photo of yourself. If it’s a business, include a photo of the physical location or something else relevant. When you’re done, click the Update button (this button will read Publish when you’re creating a new page from scratch).

Static Cling

Use the same procedure to create additional pages. Any portion of content you want to present where the information doesn’t change all that often (static content) is a good candidate. These are the anchor areas of your site. For our Dorothy’s Pet Shop example, we might create a page about procedures for handling emergencies outside of normal business hours, a staff profile page, and maybe even a frequently asked questions page.

No Comment

Although you have the option to accept comments on Pages, a lot of times this may not make sense (do you really want people commenting on your staff page?). WordPress gives you the option to turn this off. Scroll down to the Discussion section of the Add New Page screen and uncheck the boxes for Allow Comments and Allow Trackbacks and Pingbacks On This Page as shown here:

Cornerstones

Take your time to organize the main pages for your site. This is the content will remain steady and act as the cornerstone of your site. It will set the tone and probably be the basis for how new visitors form first impressions of you, your business and your site.  Craft them carefully.

This is post #12 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: How to write in that bloggy style

This is post #11 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

We’ve been working through all the mechanics of getting a post published, with some context about what makes for good content, a captivating title, and hooks into powerful search engines like Google. Let’s take a moment and talk about style.

You’ve no doubt noticed that most websites (blogs in particular) and many other forms of online communication, such as email newsletters, have a distinctive style. Good ones are clear, punchy, interesting and quick to read. Mimicking the key attributes that make that sort of writing work can help you garner attention and deliver value in this age of information overload and social media. Here are six attributes that I think work well.

Six ways to embrace that bloggy style

1. Don’t bury the lead. Don’t build your point slowly. Don’t work out a surprise ending to your story. Nobody will be there to read it. Get to the point quickly, then flesh it out with details and supporting facts.

2. Use a conversational tone. The world (the online world, at least) has come to embrace the fact that, in the end, we are all people talking to other people. Stodgy corporate-speak does not work well on the web. Write like you speak. It’s as simple as that. (Ok, leave out swear words and edit your work before publishing, but you get the point.)

3. Be brief. Brevity rules on the web. A good range is about 300 to 500  words. Unless you’re writing something instructional or something meant to be a reference piece, just make your point and let the reader move on.

4. Break things up visually. Use a photo or subtitles to separate your piece into easily digestible chunks. Put blank lines between your paragraphs. If you’ve got a bunch of stuff to say about something, try using a numbered list or bullet points.

5. Vary sentence length. Use a mix of long and short sentences to give your writing a natural conversational tone. It works. See? Mixing up sentence lengths makes your post more readable, and short sentences can help to emphasize a point.

6. Loosen up the grammar grip. Starting sentences with “and” and ending with prepositions is ok. Loosening the grip will help your writing sound more like a conversation. And, ignoring some grammar rules can help you be more concise.

You already have style

You speak to people every day. Listen to yourself the next time you’re in a conversation with someone. Take notice of how you speak, your natural voice. Incorporate that into your writing with the 6 rules above in mind and you’ll be in fine shape.

This is post #11 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Website 101: Saving drafts and scheduling posts

This is post #10 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.

Sometimes you won’t finish a post in one sitting. In those instances, you can simply save a draft of your post. To save your work for later, simply click on the Save Draft button in the upper right hand corner of the Add New Post screen.

Save DraftOf course, you can also save a draft even if your post is finished, but you don’t want it up on your website just yet. Maybe your trying to control the timing of an announcement, or perhaps you’re writing some posts in advance. Saving a draft will work well for these scenarios, but WordPress goes one step further and allows you to schedule your post for publication at a later date. This way you can “set it and forget it” rather than having to remember to come back and hit the Publish button. You can even set the exact time you want your post to be published.

In the Publish box, simply click the Edit link right next to where it says Publish Immediately and type in the date and time you’d like your post to “go live.”

Scheduling a postAfter you hit the Ok button, you’ll notice that the Publish button changes to read Schedule.

the Schedule buttonClick the Schedule button and your post will be published at the date and time you set.

Saving for a rainy day

Stockpiling posts is a great strategy for managing the workload for your website. Trying to keep up with a writing schedule can be difficult to juggle along with all your other tasks. Taking the time to write a bunch of posts at once and then dole them out over time can help to alleviate a lot of the stress of publishing. Regular updates will still require discipline, but having a few posts in the bank can really help keep things manageable.

Why are regular updates important?

Search engines learn your patterns and adjust their visits to your website accordingly. Training the search engine to come back on a regular basis will help ensure that your new content is quickly indexed and available for search results.

Users will also visit your site more frequently (or better yet subscribe – more on this later) if the content is updated regularly. There can be a better sense of the value proposition for your readers (“Hey look, at this site I get an interesting article about dog grooming every Friday!”), and a better sense that there are real humans behind the curtain.

This is post #10 in my Website 101 series; all posts in this series are tagged website101. Subscribe now so you don’t miss future posts.