In last post, I told you about Content Delivery Networks and how to use them along with WordPress. Although, now I can suggest that one should certainly use Content Delivery Network as I’ve experienced the change in speed myself! Yesterday, I implemented CDN on this blog and the notice is considerable. The pages that used to take around 9 seconds to load are now loading in about 5 seconds. That’s a decent amount of difference! Now, I would tell you some of the questions that I had in my mind and I’m sure that you will be having them too -

Is it a costly affair?

Content delivery networks are considered to be costly, however surprisingly they are not. Most of the CDN providers run on Pay as you go pricing model and that lets you take control of things. In order to run the test, I signed up with MaxCDN, they have a fantastic offer – they are giving away 1 TB for $ 10. Of course, this is a trial run and a customer will be charged near about $100 for the next 1 Tb. Anyway, I’m not trying to promote any CDN provider, I went for MaxCDN for couple of reasons -

1. It was cheaper than other CDN providers.
2. It has been referred by Mashable, Joost de Valk, W3 Total Cache and I think that was more than enough for me.
3. 1 TB will run for months, there is no monthly payment, so I don’t have anything to lose.

Is it really hard to setup the CDN?

I wasn’t sure about this answer because there wasn’t anyone to tell me that how should I go about it. However, while playing with it – I realized that it is way to simple to setup the CDN. Of course, it would have been a nightmare without the W3 Total Cache. I just don’t have enough words for the praise of this plugin, still I would try to sum up in 2 words – Simply Marvelous!

So what’s the procedure?

I did the setup on MaxCDN and therefore, I would mention the steps for MaxCDN and W3 Total Cache settings only. If you plan to use any other CDN then you may have to refer to their support. I’m assuming that most of the CDN providers will have similar options only. Anyway, here’s how I completed the task -

1. Create a Pull Zone on CDN provider. In this (screenshot) most of the settings are generic, the only place where I got confused was Origin Server URL section. Anyway, I used the following settings and created the pull zone.

2. Asked WPWebhost to change the CName record as asked by MaxCDN. In many cases, Cname can be changed by you only, however WPWebhost doesn’t give the direct option to its users. However, support team was pretty quick in making the change. After the change, I waited for about 10-12 hrs for propagation. I tried to check http://cdn.blogdesignstudio.com and once I saw the whole website load without issues, I thought that it must be the right time to make changes in W3 Total Cache settings.

3. In the General Tab of W3 Total Cache, make sure that CDN should be enabled and the type should be selected as Origin Pull (mirror) [as shown in the screenshot]

4. In the CDN Settings tab of W3 Total Cache, you can configure various options related to what you want to use through CDN and what exactly you want to serve using your own web host. What I changed was just one value; ensure that you need to just put the value of Custom CDN Domain (of the first screenshot) in “Replace Default Hostname With”. Here’s the screenshot of what I have -

That’s it! I just saved the settings and everything was working neatly for me. If you get decent traffic and want to ensure that your blog loads faster than others, then you should surely use a CDN. In the end, I can say that I’m happy with what I’ve achieved – I’ll be posting more optimization techniques to ensure that we also contribute in making the web faster!

© mayank for Blog Design Studio, 2010. | Permalink

Related posts

• Top WordPress blogs which you must have in your feed reader! (0)
• Must install Firefox plugin for all bloggers – SEO Blogger! (0)
• Check out the WordPress 2.7 backend pictures! (3)
• MyBusinessMusings.com new blog design (0)
• How to effectively upgrade your WordPress in 2 minutes! (4)

A content delivery network or content distribution network (CDN) is a system of computers containing copies of data, placed at various points in a network so as to maximize bandwidth for access to the data from clients throughout the network. A client accesses a copy of the data near to the client, as opposed to all clients accessing the same central server, so as to avoid bottleneck near that server. Content types include web objects, downloadable objects (media files, software, documents), applications, real time media streams, and other components of internet delivery (DNS, routes, and database queries). [via Wikipedia]

Well, I’m sure it sounds alien to some of you. However, I can try and simplify this for you. Let’s take an example – You upload a 2 Mb file on a server that is located in United States, one of your visitor comes to the website from UK and at the same time another from US only. Who’ll get the faster download speed of that file? Of course, it’ll be the US guy. That is how a normal scenario runs. In CDN, a normal file is replicated on multiple servers (shown as middle servers in the image below) placed across the world. So, if a UK guy will be trying to access the same MP3 file, then he’ll get it delivery through UK server only and that will considerably reduce the page load speed.

[Image credit - netdna]

Should we use CDN for a blog?

As we found out that CDN helps in reducing the speed. However, the question is that is the speed difference considerable enough? There have been many bloggers who have done their tests and found huge difference in the speed. Joost de Valk found out that his blog pages started loading in 2 sec. as compared to 7 seconds prior CDN’s application.

Well, that certainly sounds effective! Other than that, Dave Ward gives us a tip where we should use Google’s CDN based hosted javascript libraries to improve the blog page load speed. Other than that, Yahoo also suggests website owners to use CDN to improve the page load speed. Well, this only means that it makes sense to use CDN. Now, the big question arises -

How to use CDN with WordPress?

Of course, if you just want use the Google’s CDN based Javascript library then Dave Ward’s link will be more than enough for your help. However, if you want to make proper use of CDN, you’ll have to shell out some money from your pocket. Thankfully established companies like Amazon, MaxCDN, RackSpace and various others offer CDN services, you can always choose the one that suits your pocket.

Once you’ve decided the CDN provider, then you can use its power with the help of W3 Total Cache -

W3 Total Cache improves the user experience of your blog by improving your server performance, caching every aspect of your site, reducing the download time of your theme and providing transparent content delivery network (CDN) integration.

[Click the image for bigger version]

So, as you can see with the help of W3 Total Cache you can easily make use of power of CDN’s and it should certainly help in improving the page load speed. Are you going to apply CDN on your WordPress blog?

© mayank for Blog Design Studio, 2010. | Permalink

Related posts

• What all you need to do, to keep your blog secure from hackers! (5)
• Future of WordPress – What Matt Mullenweg has to say about it! (0)
• 11 ultimate resources to help you become WordPress champ! (23)
• Want to use Wordpress as an E-commerce site? (3)
• how to move a local wordpress to live blog? (0)

Since few months, I’ve been hearing lot of horror stories regarding the security compromises that bloggers have to deal with. It’s open source nature, what has been the boon for WordPress, is now standing against it (For Hardcore Open-source lovers – I am in favor of Open-source all the way and that statement of mine should not be taken as personal attack). There have been many blogs that weren’t using the latest version of WordPress are now infected with some sort of worm or some hacker gets access to the web server and misuses your precious resources. There are cases where they even harm the website by effecting its search engine rankings.

It’s always a nightmare when it comes to cleaning up the WordPress installation that has been compromised with some or the other warm, however few precautionary steps will always ensure some level of security that’ll keep “stupid hack scripts” away from your precious blog. Just follow these steps and you won’t have to shell out hundreds of dollars to make WordPress secure -

Here are some of the steps that one can take to keep the WordPress installation secure -

1. Keep your blog software up to date – WordPress has been very quick in taking actions against security attacks and generally its the older versions that become the target. WordPress now has automatic upgrade feature and with touch of a button, you’d be able to upgrade WordPress. You can read more about upgrading WordPress over here.

2. Keep strong password – It’s always advisable that one should keep a secure password. A good password is always combination of alpha-numeric characters. I’m sure these 16 firefox extensions will surely help you generate stronger password and will keep it safe for you too!

3. Use Secret key for WordPress – Some time back, I’d written the use of Secret key feature of WordPress. It’s a default feature of WordPress and one should definitely use it. Definitely, its not the only solution, however it makes sense to implement it as well. Small precautions like these will only make your WordPress more secure!

4. Set proper file directory permissions – One of the biggest loop hole starts from here itself. It’s important for every blogger to ensure that they keep proper file directory permission that is recommended for WordPress. This way, no unauthorized scripts will be able to gain access to the folder structure of your web hosting account.

5. Table prefix can be a weak point too – Table Prefix is one of the important part of WordPress’ database (in fact any database) and it is recommended that one shouldn’t use the default prefix as the default prefix is known to everyone and hackers tend to misuse that information for their evil intentions. I’d written a guide on how to change the table prefix that one can follow to strengthen the security.

6. You thought only passwords should be secure, What about the username? – I believe that these are few points that WordPress community can always do to ensure that the bloggers get safe at the time of installation, I just hope someone works on this point at least. By default, WordPress makes a default user by the name of “admin”. Most of the users keep it the same and unfortunately, that is exactly what we don’t want to do. Here’s the post that talks about securing WordPress by not displaying your actual username.

7. Make important folders inaccessible – If you thought that just setting up directory permissions is more than enough then I would say that it’s just not that simple mate! I would suggest that one should drop an empty html file (ensure that the name should be index.html) in wp-content/themes/ & wp-content/plugins/ folder. This way whenever some one will try to see the content of those folder, they’ll be presented with a blank page and nothing else. Isn’t that a smart move?

8. Keep your own computer free from viruses & malware – Lets say that you got a pen drive from your friend to copy some document and a while later you realize that your computer is infected from virus because that pen drive was full of viruses. Will you blame your own computer for that mishap? Similarly, if your computer is infected with malware and while you upload files on your blog it can get transfered to the servers too. I would suggest that one should use a good anti-virus and anti-malware scanner to avoid such kind of things.

9. Use of SSH instead of FTP – Most of the FTP software support SSH, a protocol that acts like FTP. The good thing about this protocol is that it has encryption and thus all the activity that you perform on the server is done under secure environment. Here are some tutorials that you can go through to get better understanding of SSH -

1. SSH Tutorial for Linux.
2. Getting Started with SSH.

10. Up to date server environment – Alright, this is not in your hands, but in the hands of web host. It’s always advisable that while choosing your web host, you should confirm from them that which version of MySQL, Apache & PHP are they using. Match it with the latest version mentioned on their respective websites and if they are out dated, you should ask them to update them (very unlikely) or change the web host asap – Here’s the guide to help you do that quickly.

11. Use Robots.txt to deny access to robots at important areas – There are various important folders like wp-content or wp-admin, wp-includes that don’t need to be indexed in search engines. So, its better to deny robots to let them crawl their content. Here’s this quick tutorial that’ll educate you about the use of Robots.txt.

Other important reads that’ll enhance your knowledge about WordPress security

1. Securing your WordPress install the foolproof way.
2. Hardening WordPress.
3. 11 ways to secure your WordPress blog.
4. WordPress security whitepaper.
5. 16 WordPress plugins to secure WordPress.

If you have written articles on WordPress security feel free to share it with us and we’d love to include it on our blog.

© mayank for Blog Design Studio, 2010. | Permalink

Related posts

• Blog SEO Tips – why thinking twice about Domain and hosting is important? (1)
• WordPress ranked #33 amongst top 50 web properties! (0)
• WordPress Help Center – Nice concept for quick solutions! (1)
• Installing WordPress Locally on Your Computer (0)
• (0)

Many of the WordPress themes promoted are described as being widget-ready. Widget-ready WordPress theme is a theme that has widgetized areas which allows you to dynamically manipulate these areas in a simple drag-and-drop fashion. Widgetized sidebar is another way to describe the same thing because most of the widgets are used in the sidebars of the themes. However, sometimes you find a WordPress theme that you really like, but discover that it’s not widgets ready. Don’t give up just yet, making themes widget-ready really isn’t as difficult as you might think. Follow the steps in this article and we will teach you how to Widgetize a WordPress theme making it a drag-drop widget theme.

1. Make the changes in functions.php

Open your functions.php file and insert the following code into it, save and close. (Don’t touch anything else there because incorrectly modifying your theme’s functions.php can stop your admin pages from appearing. It’s a good idea to make a backup of your functions.php or even better to backup the whole theme before modifying it) :

<?php
if ( function_exists(’register_sidebar’) )
register_sidebar();
?>

2. Make the changes in sidebar.php

Now open your sidebar.php file and check if the sidebar is widget friendly i.e. if your sidebar uses unordered lists. If not then fix it by formatting the HTML. Here is an example of a typical sidebar:

<div id=”rightcolumn”>
<ul class=”sidebar”>
<li class=”widget”>
<h2>HTML</h2>
<ul>
<li><a href=”#”>HTML</a></li>
<li><a href=”#”>HTML</a></li>
<li><a href=”#”>HTML</a></li>
<li><a href=”#”>HTML</a></li>
<li><a href=”#”>HTML</a></li>
</ul>
</li>
<li class=”widget”>
<h2>HTML</h2>
<h3>HTML…</h3>
<p>HTML HTML HTML HTML</p>
</li>
</ul>
<div class=”clear”></div>
</div>

Just add this template tag in the code directly below the <ul class=”sidebar”> tag:

<?php
if ( function_exists(’register_sidebar’) )
register_sidebar();
?>

3. You are almost there!

And close it by adding the <?php endif; ?> directly above the </ul> tag. That is it. Now go mad with your widgets!

© Igor for Blog Design Studio, 2010. | Permalink

Related posts

• Can anyone make a WordPress AIR Application? (3)
• Plugin Week! Binny is on plugin development rampage (2)
• Move your feed address because Google has made the move! (0)
• Want to get that “brand new” blogging feeling ? (1)
• How to make a child theme in WordPress – Awesome article! (0)

In my own experience the domtabs is probably one of the best ways to create Tabs. Domtab is actually a JavaScript that turns a list of links connected to content sections into a tab interface. The script removes any “back to top” links in the section and automatically hides all but the first one when the page is loaded.

First you need to download the domtab script from this site, unzip it, and then you should upload the domtab.js file to your theme folder in WordPress.

After all that done go in header.php and paste the following code in the <head>:

<script src=”<?php echo bloginfo(stylesheet_directory) .’/js/domtab.js’; ?>”></script>

Then go to the sidebar.php and paste this code where you want the domtabs to be:

<div>
<ul class="tabs">
<!-- TO change tab heading, edit the three TabLink heading below -->
<li class="TabLink" onClick="ShowTab(0)"><a class="t"></a></li>
<li class="TabLink" onClick="ShowTab(1)"><a class="t"></a></li>
<li class="TabLink" onClick="ShowTab(2)"><a class="t"></a></li>
<!-- If you add more tabs, add heading above and respective NavLinks below -->
<li class="NavLinks"><div style="display:none"></div></li>
<li class="NavLinks"><div style="display:none"></div></li>
<li class="NavLinks"><div style="display:none"></div></li>
</ul>
<div>
<!-- First Tab Code -->
<div class="TabContent" style="display: none" id="div0">
<ul>
<?php wp_list_categories('orderby=name&title_li&show_count=1'); ?>
</ul>
</div>
<!-- Second Tab Code -->
<div class="TabContent" style="display: none" id="div1">
<ul>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
</ul>
</div>
<!-- Third Tab Code -->
<div class="TabContent" style="display: none" id="div2">
<div>
<ul>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
<li><a href="#">Tab</a></li>
</ul>
</div>
</div>
</div>
<script type="text/javascript">ShowTab(0);</script>
</div>

Or you can make this code as a separate tabs.php and use <?php include(“”); ?> in the sidebar.php like this:

<ul>
<li>
<?php include("tabs.php"); ?>
</li>
</ul>

Finally you can do the styling in your stylesheet. Here is an example styles suitable for the previous code:

/************** TABS *******************/
.domtab {
float: left;
margin-bottom: 25px;
}
ul.tabs {
width:300px;
height:50px;
padding:0;
margin:0;
float:left;
}
div.TabContent {
padding:0;
margin:0;
float: left;
background: #e1e6fa url(images/tab_div.jpg) center bottom no-repeat;
}
div.TabContent ul {
padding:0 10px 20px 10px;
width: 280px;
font-family: "Lucida Sans Unicode";
}
div.TabContent ul li {
border-bottom: 1px solid #c4d7ed;
}
div.TabContent ul li a {
text-decoration: none;
color: #183152;
}
div.TabContent ul li a:hover {
color: #d95a11
}
ul.tabs li {
float:left;
display:inline;
padding:0;
margin:0;
border-bottom: none;
}
.TabLink {
background: transparent url(images/tab_li.png) top left no-repeat;
}
a.t {
float:left;
height:50px;
margin:0;
}
#tab0 {
width: 105px;
background: transparent url(images/tab0.png) top left no-repeat;
cursor:pointer;
}
li.active#tab0 {
background: transparent url(images/tab0.png) bottom left no-repeat;
}
#tab1 {
width: 92px;
background: transparent url(images/tab1.png) top left no-repeat;
cursor:pointer;
}
li.active#tab1 {
background: transparent url(images/tab1.png) bottom left no-repeat;
}
#tab2 {
width: 103px;
background: transparent url(images/tab2.png) top left no-repeat;
cursor:pointer;
}
li.active#tab2 {
background: transparent url(images/tab2.png) bottom left no-repeat;
}
#tab3 {
width: 91px;
background: transparent url(images/tab3.png) top left no-repeat;
cursor:pointer;
}
li.active#tab3 {
background: transparent url(images/tab3.png) bottom left no-repeat;
}

I hope this quick little trick will help you enough space where you’ll be able to display more content.

© Igor for Blog Design Studio, 2009. | Permalink

Related posts

• Blog Design Studio Edge – Minimal wordpress theme with javascript effects! (20)
• Don’t Let WordPress Scare Your Clients (0)
• Wordpress Blog Design Services (0)
• Chromotherapy in Blog Design! (1)
• Use beautiful fonts for typography on your blog! (0)

This phrase emerged in the USA in the early part of the 20th century. Its introduction is widely attributed to Frederick R. Barnard, who published a piece commending the effectiveness of graphics in advertising with the title “One look is worth a thousand words”, in Printer’s Ink, December 1921.
It points out the power of a single image that can present complex stories that need many words to be described, or that a single image may be more influential than a great amount of text. Today in our dynamic world this is more important than ever before. Today we must absorb large amounts of data quickly.

In WordPress it’s quite easy for you to add images to your WordPress site. Upload them directly from within WordPress by using the built-in file uploading utility in the post screen or use any FTP Client software to upload as much as you want images to your WordPress site. In WordPress you can resize images and create thumbnails too. Actually there are three size settings available for you: thumbnail, medium and large.  In the same moment when you upload an image, Wordpress will automatically generate these three image sizes not affecting the aspect ratio. The thumbnail is a resize with a crop, and the other settings are “max” width and height. So don’t worry.

Styling your images on your Wordpress blog/site

Most likely your theme is already styling your images i.e. it is set to put a border around images in your posts, and float them to the left or to the right, and most of the time this is working good for you, but sometimes, you would like to style them in a different manner. In those cases you can easily change this “default” styles by few simple edits in the HTML code.

At Blog Design Studio in most of our themes we use these styles for the images:

.alignleft {
float: left;
}
.alignright {
float: right;
}
img {
border: none;
}
img.alignleft {
float: left;
margin: 5px 10px 5px 0;
}
img.alignright {
float: right;
margin: 5px 0 5px 10px;
}

And here is what you get:

But let’s say you want to add a thick black border around the picture. Before the /> that closes the tag just insert: style=”border: 3px solid #000000″

You can add space between the border and the picture too:

You can float it to the left:

Or to the right:

And of course you can add margins according to your preferences:

Optimizing your images for WP

You should not overlook image optimization. This is also an important part of WordPress SEO. By writing good alt tags for images and clever thinking of how you name the files, you can get extra traffic on your blog from the different image search engines. You can help your lesser able readers who check out your site in a screen reader, to make sense of what’s otherwise hidden to them too.

Heavy images can cost you traffic. Your visitors won’t wait 10 seconds for your image to load! So you should optimize your images for the web.  Your images should be in either .gif or .jpg formats (.gif is best for logos and navigation buttons, while .jpg is best for photographs.)  Reduce the size of your graphics so that they take as few bytes as possible while retaining acceptable quality.

In following posts, we’ll come up with some of the tools and plug-ins that will help you in making your life easier when it comes to dealing with images!

© Igor for Blog Design Studio, 2009. | Permalink

Related posts

• Use beautiful fonts for typography on your blog! (0)
• Simple ways to give effects to the photos in your article! (1)
• Coding the WordPress Loop explained (1)

So you want to create a high-traffic site? It’s so cool to have all those plugins too. But will WordPress be sufficient for your high-traffic site? Will it survive tons of heavy traffic every day? Well the answer can be yes as long as you take care of few things. Here are some tips on how to speed up your WordPress site. Before you go ahead with this blog post, you should go ahead and read the following post as well – Unclutter your blog.

Stay up to date with the latest WordPress version and plugins

Staying up to date with the latest version of WordPress is really a must do. Make sure always to stay updated with the latest release of WordPress in order to boost performance of your blog. This is not just for fun, in every update, there are many upgrades that will enhance the performance of your blog but also you will prevent your site from security risks. You should do exactly the same with WordPress plugins. Keep them up to date, it’s as important, and for the same reasons.

Turn off, limit or even delete unused plugins

One of the biggest issues that causes WordPress sites to slow down is leaving too many plugins active even when you’re not using them. If you are using more than say 15 plugins on your blog then you need to check to see if you really need all of them. Some plugins can have many scripts and code. So if you’re not using a plugin disable it and give Wordpress a break or maybe delete it. Keep the plugins that are really necessary for your site to run and than disable the ones that aren’t needed. You can lower the number of plugins during heavy traffic times by turning off a few WordPress Plugins temporarily and than you can reactivate them again after the heavy traffic volume has died down a bit.

Be careful with the server requests

All of the items that you have on your page like html page, the css page, javascripts, images, movies, and any other item will generate separate requests for each of them to the web server. Having in mind that the server can handle a limited number of requests at a time, you should try to make things easier for it and reduce the number of items to a second server. First are the images. Your embedded images can be uploaded to an image sharing site like Flickr and by that use the big Flickr servers which can withstand the load much easier. The same for videos, upload to YouTube, Google Video or any other video hosting site and then use their embedding function from their servers within your own page.

Clean up and compress your code

Compress your CSS, i.e. get rid of the white space and get everything neat and clean and than put JavaScript into a single file and load it at the bottom of the page in footer.php. This way the styling will load first and than the JavaScript. Optimizing your code this way actually can do a lot for your load time. At first you might not notice any difference, but it will make a huge difference to your blog speed. White space like indented tabs, line breaks, etc. which you use for better readability are slowing down your blog. Decrease white space and be sure to use shorthand and will be able to speed up your site’s load.

Page Speed is a wonderful Firefox extension that has been released by Google to help webmasters to optimize their blogs and websites. This plugin minify’s the javascripts and even tells you that how one can optimize the performance of the scripts and thus overall improving the speed of the blog.

One another way to speed up the blog’s performance is by using few of these plugins -
1. WP-Super Cache – This plugin creates a cached copy of the dynamic pages and thus doesn’t load up the server with dynamic requests. Find out that why using this plugin is such a good idea and why it makes to our top plugins for wordpress list.
2. Optimize DB – This awesome plugin will optimize the tables of your database and thus improving the overall performance of the blog.
3. Shrink-O-Matic – This is not a WordPress plugin, however an Adobe AIR based application that reduces the image size and eventually speeds up the loading time of the blog pages.

© Igor for Blog Design Studio, 2009. | Permalink

Related posts

• 6 points to professional podcast publishing (0)
• Full Website on Wordpress for Dynamix Outsourcing (0)
• The Bardles Law Blog Design (0)
• Don’t Let WordPress Scare Your Clients (0)
• NFL Touchdown redesign (0)

Till version 2.7.x, WordPress allowed the programers to make changes in the core behavior, in indirect way by allowing them to add functions in my-hacks.php file. This way it kept the core files safe. Although, after the release of WordPress 2.8 the support for this file has been discontinued. I believe that the move is absolutely correct as there weren’t many users of this particular feature and if at all any functionality needs to be added, it can be done through themes and plugins directly.

The good news is that those who are interested in keeping this feature can follow these simple solutions posted by Frank @ WPengineer. By the way, have you ever used this option or ever made use of my-hacks.php file?

© mayank for Blog Design Studio, 2009. | Permalink

Related posts

• Hits and Misses of WordPress 2.6 “Tyner” and the bug which I found! (2)
• “Who Sees Ads” trick increased email subscriber count by 180% (7)
• A few mistakes that beginning bloggers should be aware of (2)
• What you need to learn from Valleywag’s blogger! (1)
• Check out the WordPress 2.7 backend pictures! (3)

While you ponder over the question (are you still thinking about it? if the answer is yes, go ahead and take these mind exercises or play these games), I would remind you to ensure that you subscribe to our blog for regular tips like these.

WordPress by default has “admin” as the username and thus it becomes easier for the hackers to run the bruteforce attack on your blog. If you use default username (i.e. “admin”), they just have to work on the password, however if you don’t use this username and have something different or personal, then it’ll be equally difficult for the hackers to crack the username and password (this explanation is for those who are still thinking about the question). Anyway, here are some of the steps that you should perform to ensure that you are safe from the “username” point of view as well -

1. Rename the admin username -

a. Using your webhost’s MySQL admin tool (e.g. phpmyadmin), locate and select your WordPress database.
b. Then – locate and select the wp_users table (wp prefix may differ) and then click the browse icon.
c. Locate “admin” and click the edit icon.
d. Under the user_login section, change “admin” to your preferred name and click go.

2. Mention your public name in profile – WordPress allows you to change your display name and gives the option of displaying the username, nickname, first name or full name as the author name in the post. It becomes an important step because by default, it displays your username as the author name.

So, you should specify the first name, last name and if you want you may specify the nickname too and then change the display name accordingly.

3. Create another username – I’ve been an avid supporter of not using the admin username for day to day stuff. It’s always sensible to have an extra and limited account. I will suggest you to add another username for your blog and give it the role of “editor” instead of admin rights and use it for everyday task.

I hope that you’ll be finding this series a little bit useful and that you’ll be able to keep your blog safe from the prying eyes!

© mayank for Blog Design Studio, 2009. | Permalink

Related posts

• Security Check – How about a stronger password for WordPress blogs? (0)
• Find out if your WordPress theme is worth your love? (0)
• Tools that can help you make wordpress secure! (0)
• Security Check – WordPress table prefix change adds more security (4)
• Amazing and quick security posts! (0)

While installation of WordPress, we come across a value called Table Prefix, in Wp-config.php file. By default, this value is “wp_” and most of the bloggers tend to leave the default value over there. This is where, automated bots can easily start attacking as they already know the major structure of the whole database.

There can be two approach for this particular problem -

1. Changing the table prefix before installation – This is a no brainer! If you are doing manual installation, you just need to change the table prefix from “wp_” to anything else (e.g. wp12_ , wp_1_ – in short just about anything), in wp-config.php file.

2. Changing the table prefix after installations – There are many bloggers who tend to install WordPress through automated scripts like Fantastico or through one-click installers. Those scripts don’t allow you to change the table prefix and thus the only resort in that case is to play around with phpMyAdmin and by running sql queries. There is an automated way as well.

a. Manual way of changing – Sherif has posted a wonderful and detailed tutorial that allows you to change the table prefix in 6 simple steps.

b. Automatic way of changing – Fortunately, there are plugins available to automate this 6 step process and you may use them to make your life even simpler. Blog Security has already released a plugin that automates the things for you. WP-Security scan plugin also allows you to do the same work.

***Words of Caution*** – Don’t forget to make backup of your database.

I told you! It only sounds scary, however it isn’t that difficult to play around with WordPress and little advanced tools. Now you know that why I advocate for WordPress!

© mayank for Blog Design Studio, 2009. | Permalink

Related posts

• Security Check : Role of Username in securing your WordPress blog (7)
• Security Check – Do upgrades regularly and be secure! (0)
• Amazing and quick security posts! (0)
• WordPress Security Service for free! (1)
• Security Check – How about a stronger password for WordPress blogs? (0)