Layout Image

FREE Click Home the Bacon E-Zine Enter Name

Email

WordPress Trainer,Follow Us on FacebookWordPress Trainer, Follow Us on TwitterWordPress Trainer, Follow Us on LinkedIn

Archive for WordPress Plugins

A new version of WordPress, WordPress 3.5, is now available to download or automatically update on your site in your Dashboard.

BUT Before you update to the newest version of WordPress please do the following:

  1. Back Up your site! I highly recommend BackUpBuddy and it’s being discounted until Dec. 21st at 35%!
  2. Once you have installed BUB and do a full backup, either download to your computer or send to your cloud storage.
  3. Update ALL your plugins!
  4. Deactivate ALL your plugins.
  5. Install the newest version of WordPress.
  6. Once installed turned on (activate) ONE plugin at a time and then go look at your site, if it’s ok and still there, go activate the next plugin and then go look at your site, if it’s ok and still there, keep repeating this process until ALL your plugins are activated again. DO THIS because you might have a plugin installed that doesn’t work with the newest version of WordPress. If you activate them all at once you won’t know which one “broke” your site. It can take some time depending on how many plugins you have installed.
  7. If you have plugins installed and you don’t use them, this is a good time to delete them.
  8. After everything is updated, and everything is working properly do ANOTHER backup and download that or send off to the cloud.

Repeat this process every time a new version of WordPress is released – because if you don’t – this might happen to you:

Your site gets hacked or you get blacklisted by Google!

If you need help doing this I’m available for you by calling 410-586-9440 or emailing.

Google Blacklist:
The Big Red Screen of Death

If you’ve ever visited your site and seen this (or visited someone else’s site) it can make your heart sink and scare the heck out of you.

Google Black list red screen of Death

I know – it happened to me on THREE sites in two weeks!

And worse yet two of my associates called me to say they too had the Google Big Red Screen of Death!

Well I knew that the problem “might” have been that we were ALL guilty of not keeping our WordPress updated to the current version – opps – and we all know better – just was busy doing other’s work – so the updating lapsed – which happens to the best of us.

Clicking on the “Why was this page blocked?” can be a little overwhelming and downright confusing to a novice!

One client kept calling me, “I don’t understand! What are they asking me to do? What do I need to do?”

Here are some of the tips I gave her:

  • Update everything; WordPress and all your plugin’s (take a Backup first!)
  • Run a Malware scan, either using BackUpBuddy’s built in Malware scanner or a free scan through Sucuri.
  • (Please note: in two of the cases, hers and mine, the sites were not WordPress, they were FrontPage sites – OLD sites. So I suggested, and did myself, upload the latest backup to see if that would take care of the problem of the malware, which it did.)
  • Log in to Google’s WebMaster Tools and ask for a review of the site.

Now Here’s the Catch!

If you have never added your sites to your Google account and/or are not using Google Webmaster Tools no reports will be there and you have no place to ask for a review.

Google WebMaster Tools

Chalked full of information and tips – you really need to add your sites here and it’s easy! Sign up for it – it’s FREE – and start adding your sites:

Google Web Master Tools

Here you have several reports, such as Site Health! And this is where you can also get notified if you have been blacklisted and ask for a review once you clean up your site.

How to Keep Your Site Clean

Let’s go a little deeper, although because of the “mean-nasty-I don’t have anything to do except to see if I can hack your site” people out there, there is no guarantee; HOWEVER doing some of the suggestions below will put you at less risk and give you more peace of mind.

Dre Armeda, founder of Sucuri, did a training for iThemes and here are some of my take a ways I’d like to share with you – and don’t just read them – go DO them after you’re finished reading this article!

It all starts with your computer – not your web site!

  1. Keep your computer and software up-to-date
  2. Install and keep updated your anti-virus and firewalls (I use SystemSuite Professional – Small fee and Malwarebytes Anti-Malware – FREE)
  3. Run your anti-virus at least weekly
  4. Use a password manager and keep all your passwords in a safe place, such as KeePass Password Safe – it’s FREE!)
  5. Change your passwords often
  6. Don’t share your passwords

WordPress Security Tips

As of this writing there are 57,269,277 WordPress sites in the world! (See http://en.wordpress.com/stats/ for more stats)! WOW!!!

  • Keep WordPress updated
  • Research plugins and themes before installing
  • Keep plugins updated
  • Delete plugins and themes you are not using
  • Don’t install WordPress using Fantastico (the five minute install) – Have it installed SECURLEY!
  • Before installing WordPress, change your wp-config file, making sure you enter in the secret salt key (https://api.wordpress.org/secret-key/1.1/salt/ ) and changing the table prefix from wp_ to something else!
  • Don’t use a FREE WordPress theme unless it’s in the WordPress Directory. These themes and premium themes that you pay for (I highly recommend themes by iThemes) have high standards and need to meet certain criteria before going into the directory. Free themes that you found on Google can have several things embedded in them: encoded text links to promote various products and links to places you do NOT want your visitors to go to. Example: I was first starting out and a Spa I was working on found a free theme and had me install it. Well in the footer was a masked link that took one to a gambling site – and it could not be removed! The spa owner did not want her site to be represented that way. Eventually I installed iThemes Builder and built her site. To learn more, here is an article that Dre recommended: Why You Should Never Search For Free WordPress Themes
  • Don’t use ADMIN as a WordPress user name (If you are using Admin as a log in user now, log into your WordPress Dashboard and go to Users. Add a new User that has Admin privileges. Log out and log back in with the new log in and then go back and delete the User Admin).
  • Create and use a STRONG WordPress log in password
  • Check to see how safe your web hosting company is. In your browser’s address bar type in: google.com/safebrowsing/diagnostic?site=YOURHOSTINGCOMPANYWEBSITE.com I use Host Gator so my URL would look like this: http://google.com/safebrowsing/diagnostic?site=hostgator.com

These are just some of the items Dre Armeda, Founder of Sucuri touched on. To view the presentation, begin the video below:

How to Clean Up Your Site

After doing all the above there still is no guarantee that your WordPress site might not get hacked or blacklisted by Google or other browsers.

And if you don’t know HOW or have the TIME to clean your site and ask Google to review it, then I HIGHLY recommend using Sucuri Scanning Services. That is whom I turned to.

What I liked about them is they are FAST – with in four hours my site was cleaned and they even submitted it to Google to review. And I found that Google seems to review your site faster than when you ask for a review (which could take 2-3 days). Mine never took more than a day using Sucuri.

PLUS Sucuri continues to scan your site(s)! An ongoing service that is well worth the cost and peace of mind!

Sucuri has a variety of plans to choose from – so go and see what’s best for you!

Sucuri Security

And if you need any other help or training, please contact me via phone 410-586-9440 or email – Happy Security!

… Editing the PHPMyAdmin and SQL Query: WP_Options!

WP_Options Screen Shot

I have “dabbled” in this area before and “seen” things; however where I was about to BOLDLY go and EDIT – was just a little unnerving, I did NOT want to break the site – the client’s site!

So let me start at the beginning to tell you WHY I had to venture here and edit code:

My client had performed a WordPress upgrade to version 3.4.1, which caused his plugin, PluginBuddy Carousel (version 1.0.23), to not allow him to add anymore images – he would get an error message Cheatin uh? (this is a WP error message), so he called me.

After looking around I was thinking it was a user or password problem (later I learned we just needed to upgrade the Carousel plugin – opps!) so I asked if he had the network admin user/pass?

He answers, “I’m pretty sure – go ahead and change access to the Carousel to that.”

Sure?

Yes.

I change the access and now we are both locked out of Carousel and he can’t locate the user/pass! Oh NO!

So I’m thinking; lets just delete the plugin and add the newer version 1.0.24 of Carousel thinking this will fix our problem – it didn’t!!! (Client had told me he had updated all plugins before he upgraded WP – he hadn’t - lesson learned – check behind the client!)

So I turned to the PluginBuddy Forums for help – how in the heck do I change access to this plugin??

Elise Alley, one of the moderators in the iThemes Support Forums > PluginBuddy Forum, gave me a much needed helping hand and a fix.

First I did a full backup of the site using BackUpBuddy – you should ALWAYS backup your site before making major changes, upgrading, and of course playing around with permissions.

Basically what I had to do was log into the CPanel of the client’s site and then go to PHPMyAdmin, locate the wp_options table and then locate pluginbuddy_carousel (See image above). Once located I clicked on the pencil to edit. For this instance I had to change some values at the end of the string, which looked a little scary to me (to you too uh?) See image below:

wp_tables changing permissions

What Elise had me change: at the end of the string:  s:14:”manage_network”;i:0;b:0;} TO:  s:16:”activate_plugins”;i:0;b:0;}

Then I clicked Save and Voila! We were able to get back into the PlugInBuddy Carousel.

Lessons Learned:

  1. Check first to see if a plugin needs updated
  2. Don’t change access even if the client says he has the user/pass
  3. Don’t be afraid to venture to the “unknown” if you have specific instructions
  4. Making the journey is a learning process

ColumbusBikeTours.com  just completed!

I wanted to share my latest web design project and tell you a little about it – I hope you enjoy it!

columbus bike tours & bike rentals

ColumbusBikeTours.com Design and Plugin Information:

Used Builder by iThemes and customized the child theme called Adept

Home Page: Used PluginBuddy’s DisplayBuddy Rotating Images

Side Bars: Installed three widgets and installed the WP Wunderground plugin and customized the colors

Installed three widgets on bottom of pages

Customized the footer

Uploaded Banner created by Andre Hawkins of  Kenosisdi.com

Created a custom navigation menu

Customized Style Manager

Installed Gravity Forms with PayPal add on onto the Bike Tours and Bike Rental pages

Installed Gravity Forms on the Contact Page

Installed Q and A Plugin by Raygun for the FAQ’s on the Bike Tours and Bike Rental pages

Other Plugins installed:

BackUpBuddy by PluginBuddy Team

Builder SEO by Chris Jean of  iThemes

Builder Style Manager by Chris Jean of iThemes

Easy Theme and Plugin Upgrades by Chris Jean of iThemes

MapPress Easy Google Maps by Chris Richardson

Simply Show Ids by Matt Martz

TinyMCE Advanced by Andrew Ozz

Widget Logic by Alan Trewartha

WP Super Cache by Donncha O Caoimh

So what do you think?

Darren, the owner of ColumbusBikeTours.com grand opening and ribbon cutting is July 10th, so if you live in Columbus, OH, stop by and tell Darren Janet says hi!

Or if you ever visit Columbus, OH, consider taking his historical bike tour or renting some bikes to cruise around the city.

Do you need a web site? I’d be happy to speak to you about your needs. Call 410-586-9440 or email me.

 

 

WordPress Plugins Make Your Web Site, Work, and Life Easier!

WordPress Plugins

If you’re new to WordPress you might have noticed in your Dashboard (your administration area) a plugin icon (looks like an electrical plug) and the word Plugins – and you just might be scratching your head wondering what the heck WordPress Plugins are and why you need them.

What are WordPress Plugins?

  • In simple terms a WordPress Plugin is a “mini” software program, if you will, that someone wrote to make your web site, work, and life easier.
  • WordPress plugins are added (installed) into your WordPress application (your WordPress site).
  • WordPress Plugins can add customization, features, and services to your WordPress site; such as adding video, adding an events calendar, adding rotating images/text, adding a shopping cart, an email list, and the list goes on and on!
  • Some WordPress plugins have settings and some don’t.
  • Some WordPress plugins are free and some are for a fee, referred to as Premium Plugin’s.
  • Some WordPress plugins are used in the editing area of a page or a post and some are used in the widget area of your WordPress site.
  • Some WordPress plugins will appear, after installing, in your Settings in the Dashboard that will have their own “clickable” area in the Dashboard under Settings or somewhere else on the left of the Dashboard.wordpress plugins dashboard
  • Currently the WordPress.org depository has over 18,330 plugins to assist you in almost anything you can imagine or need for your WordPress web site.

How to Find WordPress Plugins

You can find WordPress Plugins in the Administration Panel (Your Dashboard) > Plugins > Add New panel, or directly via the Official WordPress Plugins Directory and download them, and then FTP them up to your site.

Tips BEFORE You Install a WordPress Plugin

  • Know the version of WordPress you have installed on your web site. You can find this out by logging into your Dashboard and on the home page it will tell you what version of WordPress you have installed.
  • Before installing a WordPress plugin make SURE it is compatible with your version of WordPress. When you find the WordPress plugin you want or “think” you want read the details FIRST before clicking Install Now! You’ll see something like this – generally on the right side of Plugin Details: Requires: 3.1 or higher (This means your WordPress version MUST be above 3.1), Compatible up to: 3.3.1 (This means it will work fine with WordPress versions up to 3.3.1), Last Updated: 2011-12-5 Downloads: 947,083
  • When you click on Details read this stuff or take a look at the plugins: 1) Description, 2) Installation, 3) FAQ, 4) Screenshots, and 5) Changelog.
  • Also check out the ratings that people have given the WordPress plugin and any reviews you might find.
  • BACKUP Your WordPress Site!

I Can’t Find a WordPress Plugin for My Needs!

You’re in luck! You can write your own WordPress plugin if you know how!

Updating WordPress Plugins or Updating WordPress – Warning Tips

  • Do a full backup FIRST before you update a WordPress Plugin!
  • Do a full backup FIRST before you update WordPress! Before you update your WordPress version FIRST Deactivate (turn off) ALL your WordPress Plugins!! Once your WordPress version is updated activate (turn on)  ONE plugin at a time, check your site in a new tab in your browser and make sure it WORKS! Why? Because if you update WordPress and a plugin you have installed is NOT up to date or compatible with the newest version of WordPress you will BREAK your SITE!!! I  know – this has happened to me – thank goodness I had a backup to restore the site!!!!
  • I HIGHLY recommend you purchase BackupBuddy by PluginBuddy. BackupBuddy is a premium plugin that not only backs up your WordPress site (and will send it to S3, Dropbox, FTP, your email, or Rackspace Cloud) BUT has a built in Malware Scan.

Some WordPress Plugin Questions for You:

  • What else do you need to know or learn about WordPress Plugins?
  • Do you use WordPress Plugins?
  • What are your favorite WordPress Plugins?
  • Is there a WordPress Plugin that you need some instructions on how to use? (Which ones?) I’ll do my best to make a how-to video for you!!

Please leave your responses, comments, or questions in the comments area below and make sure you sign up for our blog posts and newsletter!

Yesterday I was sent an email from a former student of WordPress training that I do at the College of Southern MD. regarding a virus that is attacking WordPress 3.2.1.

I was somewhat surprised yet more shocked that I hadn’t heard about this from any of my “daily” WordPress blogs that I subscribe to or any of the WordPress community. So at first I thought it might be a hoax so I ran it through Snopes.com and nothing came back saying it was a fake.

So I’d like to share some of the story with you, along with a link so you can read the entire article and share with you an inexpensive plugin that you can check to see if your site was infected.

From the Register, dated January 31, 2012, and article by John Leyden he begins with:

Malware-spreaders are hacking into vulnerable WordPress-powered sites in order to drive traffic towards pages loaded with exploits.

Hundreds of websites based on WordPress 3.2.1 have been compromised so that surfers directed to the WordPress-built sites via email links are exposed to the Phoenix exploit kit, M86 Security warns.

A full-write up of the attack, including screenshots, can be found in a blog post by M86 Security here.

Now you should know that WordPress is now in version 3.3.1; however MANY WordPress owners either do not update their versions, or don’t know how to update their version, which is really very simple. (I’ll teach you that in another post).

What I want to share with you today is how you can quickly and easily check to see if your WordPress site has been infected.

Step 1: Purchase BackupBuddy by PluginBuddy. BackupBuddy is a premium plugin that not only backs up your WordPress site (and will send it to S3, Dropbox, FTP, your email, or Rackspace Cloud) AND has a built in Malware Scan

BackupBuddy Step 2: Click on Malware Scan – All you need to do after purchase and installation is click on Malware Scan – see I told you it was quick and easy!

And look at all the other cool things it offer:

  • Backups and Restores your WordPress site
  • You can schedule your backups – put it on automation baby!
  • You can even migrate your WordPress site to another site!!
  • PLUS when you get BackupBuddy, you also get access to their support forum. (Which I can tell you is one of the best I’ve used since 1996!)

Step3: If everything checks out OK now back up your site.

Step 4: Deactivate all your plugins

Step 5: Update your version of WordPress.

Step 6: Activate your plugins one at a time. Activate one and look at your site live – why? Because you might have a plugin installed that won’t work with the newest version of WordPress. Activating one at a time, looking at your site to make sure all is working and repeat the process. If a plugin isn’t up to date and doesn’t work properly with the newset version of WordPress you’ll know which one to either keep deactivated doing it this way or see if there is an update for the plugin.

Step 7: Need Help? Fill in the form below. We’ll get back to you shortly.

BackupBuddy Help