Check your web host file permissions first!

November 23, 2010 | No Comments Yet

WordPress security issues come and go, and while some stay because it’s tough to get the crud out, other times it’s because site owners overlook an important part of keeping their hosts protected: file permissions.

A properly configured web server will not allow users to access the files of another user, regardless of file permissions. The web server is the responsibility of the hosting provider. The methods for doing this (suexec, et al) have been around for 5+ years.

Matt Mullenweg warns against web hosts and other security announcements that place the blame on the WordPress software without first checking if proper file permissions are in place.

Devlounge has an old but still applicable article on protecting your wp-config.php files, for starters. This article on WP Tavern also tackles the issue above and shares more file permission advice especially on shared hosting accounts.

Leave a Comment | Tags: , , , , , , , , , ,

Optimize WordPress loading time by 75%

November 12, 2010 | No Comments Yet

So we’ve confirmed Google is factoring in site speed into their search ranking algorithms, but what exactly can you do to your WordPress site to make it load faster? David Kadavy shares his own website optimization story by doing the following:

  • Move from a shared hosting service (in this case Dreamhost) to VPS (virtual private server) hosting
  • Install the W3 Total Cache plugin
  • Use a CDN (content delivery network) such as Amazon Cloudfront: this works well with W3 Total Cache, which is why he recommends it over other WP caching plugins
  • Optimize with CSS sprites, inline styles and scripts, Gzip, and other recommendations from Yahoo.

Leave a Comment | Tags: , , , , , , , , , , , , ,

Mark Jaquith on WordPress and web hosting

May 17, 2010 | No Comments Yet

WordPress lead developer Mark Jaquith sounds off on the state of web hosting companies and their lack of support for the publishing software. He emphasizes two of the biggest issues WordPress users have when it comes to maintaining their installs: caching and security.

People ask me for hosting recommendations all the time. I have a few decent hosts that I’ll recommend, but I don’t have any hosts about which I can say “use them, because they know how to host WordPress, and they’ll support you.” I’d like nothing better than to have a dozen such hosts to recommend by this time next year. WordPress is here to stay, and it’s time for web hosts to adapt!

This is just the first of many voices from WordPress community leaders cementing an initiative for better WP support, as mentioned in the State of the Word at WordCamp SF 2010. I think the greatest lesson here is never to settle with just any web host. With so many choices out there and your own site and brand on the line, choosing a proper, WordPress-friendly host should be top priority. You can’t afford not to.

As for the web hosting companies themselves, it’s a great opportunity to improve their game and offer specialized services that help with the upkeep of their respective client websites. A win-win for all.

Leave a Comment | Tags: , , , , , , , , ,

Matt Mullenweg WordCamp SF keynote & Mashable interview

May 3, 2010 | No Comments Yet

WP Tavern has posted notes from Matt Mullenweg’s State of the Word at the 2010 WordCamp San Francisco. In it, Matt emphasizes the growth of WordPress into one of the most popular content management systems today: from the admin interface, to the number of plugins, to the upcoming features in WordPress 3.0: WordPress MU merge, menu navigation system, custom post types, and more.

Roughly 74% of WordPress sites are being used as blogs and content management systems. This is up from about 40% last year. It’s the fastest growing use case of the software. About 80% of people are making money from WordPress. 22% WordPress is their day job. 18% from custom development and hosting, 12%.

Other things to take from the talk:

  • A new default WordPress theme will be created every year. This year’s Twenty Ten features custom post headers and backgrounds.
  • WordPress should be as accessible as possible: the Post By Email feature will be turned into a canonical plugin.
  • WordPress.org will be redesigned.
  • Release cycles will go from 3 per year to 2.
  • On security issues: Automattic will work with web hosting companies to help protect its WordPress users, via a mailing list, security checks, and a list of best practices.

Mashable also conducted an interview with him, which covers pretty much the same things discussed at WordCamp. Watch it below:

Leave a Comment | Tags: , , , , , , , , , , , , , ,

Win premium WP themes, hosting plans, and cash from JaypeeOnline

November 7, 2009 | No Comments Yet

PBA 2009 Best Technology Blog JaypeeOnline is holding a Thanksgiving Giveaway contest for all the bloggers out there. The sheer amount of prizes is staggering, with a total worth of $1,500.

Thanksgiving is one of my most favorite holidays and I always look forward to it because its one of the times in the year where I get to spend time with family and friends and at the same time eat good food. Thanksgiving is the time to give thanks and express gratitude so in celebration of this special occassion, I’m giving away $1,500 worth of cash, premium WordPress themes and web hosting. This is my way of expressing my gratitude for all the blessings I’ve received this year including the recent achievements and success of JaypeeOnline.

Contest mechanics include subscribing to his blog, blogging about the contest, and leaving a comment on the contest entry. There are bonus points you can also earn to give each person a total of 12 points.

Deadline is on November 30; winners will be announced the next day. Join here.

Leave a Comment | Tags: , , , ,