wordpress

A 4-post collection

Configure SSH2 Access for Updating WordPress

WordPress is one of the most popular blogging platforms on the Internet. One of the first things I do when I setup a new WordPress installation is harden it. You can read about a number of my suggestions in the article Secure Your WordPress Installation. However, one of the more complex activities I undertake is securing the upgrade facility so that it uses SSH for handling all of my site’s updates. This is for Ubuntu 10.04 LTS: Create a “wordpress” user that will be used to manage your site. [shell] % sudo adduser wordpress [/shell] Add the following lines to your wp-config.php, I usually put mine right after the Language definition: [shell] /** * Define Upgrade FTP Usernames and Passwords...

Secure your WordPress Installation

WordPress is an extremely popular web platform with about 7% of all websites running WordPress. That large a population means that attackers have a rich environment to exploit your installation. There have been historical attacks and worms written specifically to target WordPress. Even highly visible bloggers weren’t immune to the attacks. However, there are some simple actions you can take to ensure your WordPress installation is as safe as possible. Backups I shouldn’t have to say this, but if you are not creating backups of your WordPress site, then you will eventually lose it.  This isn’t me being melodramatic.  It’s a fact.  Something will occur and you’ll find that you cannot recover or repair the...

April Fools! Your blog backup is incomplete.

My first VaultPress backup was completed at 7:03pm, Fri, February 25. I felt safe. I had been playing with various WordPress backup solutions, including AWB, BackupBuddy (I purchased it), but wasn’t happy with any of them. AWB only ran when I manually ran it, or else I had to build a cron-job on my Unix host to run it. BackupBuddy only ran if someone accessed the site. Then I found VaultPress and requested a “Golden Ticket” to the Beta. I even Tweeted them to see if I could get my “Golden Ticket” a little earlier: [quotetweet tweetid=41224401361965057] It worked! VaultPress let me know my “Golden Ticket” was on the way: [quotetweet tweetid=41255731672006656] I registered my account,...

Moving from SquareSpace to Wordpress

On July 20th, I moved my personal blog site, robpickering.com from SquareSpace to WordPress.  This article is about why I did it and then how I performed the task, maintaining all of my posts, post dates, migrating authors, and most importantly, keeping all of my user comments.  I’ll also discuss some of the downsides and what you’ll lose (and how to get it back). The Why SquareSpace is a great personal website hosting company.  They have an amazing platform and lots of options for building yourself a web presence, be it a blogging platform, or just a standard website.  However, those tools come at a price:  the inability to have complete control over your environment.  If their...