Website maintenance: keeping your WordPress site updated and safe

39
March 3, 2015 Clare Parkinson @clareparkinson 15NTC WordPress Day Website Maintenance

Transcript of Website maintenance: keeping your WordPress site updated and safe

March 3, 2015

Clare Parkinson

@clareparkinson

15NTC WordPress Day

Website Maintenance

#15ntc

Website maintenance

#15ntc

Up and running

#15ntc

Safe from hackers

#15ntc

Recovery without drama

#15ntc

● Prompt updates

● Security

● Backup and recovery

What needs to be done

#15ntc

You can focus on content

#15ntc

Money vs time: pay someone

#15ntc

Money vs time: do it yourself

#15ntc

WordPress managed hosting

#15ntc

● Updates to WordPress

core

● Security: scans and

protection

● Daily backups

● Restore from backup

WordPress managed hosting

#15ntc

Update themes and

plugins.

Managed Hosting doesn’t:

#15ntc

Do It Yourself

#15ntc

● Updates to WordPress

core, plugins, themes

● Security: scans and

protection

● Backups

● Restore from backup

DIY website maintenance

#15ntc

3.7.0 -> 3.7.1 Updates

automatically!

3.7.1 3.8 You

have to do it.

WordPress Core updates

#15ntc

When to update?

#15ntc

Plugin: WP Updates Notifier

#15ntc

Update on a staging site.

or

Update behind a “Coming Soon”

screen

or

Update in a low-traffic period.

Update Precautions

#15ntc

Restore files from backup

or

Or get last known working version

of plugin from Repository and

reinstall via FTP

Then get help from a pro.

If an update goes wrong

#15ntc

Security

#15ntc

● Updates

● Login security

● Get security

notifications

● Delete what you don’t

need

How not to get hacked

#15ntc

● Use strong usernames:

Don’t use “admin”, don’t

use your domain name.

● Use strong passwords.

Login security

#15ntc

Use a plugin:

● Brute Force Login

Protection

● iThemes Security

● WordFence

Limit login attempts

#15ntc

Track who’s trying to log

in, what users are doing.

● WP Audit Security Log

● WP Security Log

Track user activity

#15ntc

Get security notifications

#15ntc

Delete what you’re not using

#15ntc

Backups

#15ntc

Backups

#15ntc

Your host can restore

from backup.

● Maybe not recent

● Maybe not free

Your host’s backups

#15ntc

● UpdraftPlus

● WordPress Backup to

DropBox

● BackWPup Free

● BackUpWordPress

Free backup plugins

#15ntc

● Database: your content

and settings

● Files: Theme, plugins,

and media

Make your own backups

#15ntc

● wp-content/themes

● wp-content/plugins

● wp-content/uploads

Files to back up

#15ntc

Schedule your backups

#15ntc

Database daily + files

weekly

or

Database + files daily

or

Database + files weekly

Schedule your backups

#15ntc

Offsite backup

#15ntc

● Click to restore:

UpdraftPlus database

● Others: download from

remote, unzip, ftp to

your server

Restore from backup

#15ntc

Updated, secure, backed up

#15ntc

You can focus on content

March 3, 2015

Clare Parkinson

@clareparkinson

15NTC WordPress Day

Website Maintenance

Any questions?