Informal WordPress Q&A Gathering

Announcement:

Austin WordCamp -  tentatively to happen on a Saturday during the last two weeks in May. We are currently seeking a venue for 300 people that would allow us to split into two tracks, would be low-cost, have internet access and would allow us to cater our own food. If you have any good leads, please contact Sandi at sbatik@pleiadesservices.com.

 


 

Tonight we’re taking questions from the group.

 

What’s a good theme to start with?

Each major release of WordPress comes with a default theme that has the most up-to-date code. Right now the default theme is Twenty-Eleven, and it’s a great place to start and get used to the way WordPress works.

 

How do you create a child theme?

When you want to make changes to the way a theme works, it’s a good idea to make a child theme first.

Create a new theme folder and add a .css file with the following at the top:

/*
Theme Name: Twenty Ten Child
Template: twentyeleven
*/
@import url("../twentyeleven/style.css");

(Visit my page that explains step-by-step on how to create a child theme for Twenty Ten)

 

Drupal vs WordPress

Drupal is more powerful but you really need to be willing to go into code. WordPress is easier to get started with and requires less technical skill to be successful.

As one person put it, Drupal is like a cascading brick wall, but if you can get through the hurdles it can be really powerful.

 

What’s a good slideshow?

When you’re looking for a slider or any other plugin, you may find that the WordPress plugin repository is a good place to start, though it is also sometimes hard to find what you’re looking for.

 

Social Media buttons

 

Video questions

Any good video carousels?

If you have video on your homepage, does it hurt your rankings with Google?

Probably not unless it impacts the load time significantly.

How do you generate thumbnails for videos rather than photos?

 

How do you modify more of your theme beyond the basic options using CSS & PHP?

When you’re in the admin panel, under Appearance you can go into the Editor and access the PHP and CSS files. The files also can be accessed via FTP: public_html > wp-content > themes > the theme you want modify.

 

Backing up your theme and your site

WordPress creates your site dynamically. You have your theme files (the appearance) as well as a database (all of your content).

To backup your appearance, you can download the wp-content or theme folder to your desktop. There are also some plugins that will allow you to backup your site and your database.

WordPress offers information on backing up your site.

There is also a nice plugin called BackUpWordPress that backs up both your theme files and your database.

 

How do you make your site more secure from bots randomly seeking out your site and trying to find vulnerabilities?

You may find Nick’s posts on WordPress security useful.

 

Why is my site not loading right?

Load order is important. If unstyled content loads before your stylesheet, it will display improperly. You may also want to play with where  javascript loads.

 

What is Firebug?

Firebug is an add-on for Firefox that allows you to view and play with the HTML and CSS code. Have fun with it!

WordPress for Bloggers

Tonight we welcome Julie Gomoll and Clark Wimberly to talk about using WordPress for blogging.

Announcements:

Getting Started with WordPress (WP 101) class: Sept. 20th, 7-9pm at Cospace.

Blogathon Austin – Oct. 1st at Link CoWorking. All-day blogging, conversations, tech support for bloggers. Join us!

Submit a question for next month’s meetup

 


 Julie Gomoll

Julie is a graphic/web designer and entrepreneur. In the 90s Julie started up Go Media, which she sold to Excite. She “rode the internet wave” going from 35 employees to 3500. She started blogging in 2004 or 2005, but when she got into WordPress she felt she could control her own destiny. She feels like she has a lot of power with WordPress without being a coder.

How to develop a content strategy

When you’re planning a blog, you need to have several ideas at hand. You should have a plan for at least a couple of months or you’ll run into trouble. Do they all have to be all long thought-out articles? Actually a mix might be ideal. A long post makes people realize you’re serious. But there’s nothing wrong with a post that’s brief and spontaneous, as in, “this is a cool thing I found today” so you are generating content on a regular basis. A blog is a living thing.

Plugin to help with this process: Editorial Calendar – allows you to plan and schedule your posts.

Reposting content

Actually reposting content is a bad idea because Google will penalize you for duplicate content, even if it’s on another website/blog. But referencing a previous article is a great idea because it will drive more traffic to your site and help with your search engine optimization (SEO).

SEO is using keywords, headlines, names of categories and navigation so that when people are searching for things, they will find your blog.

Inserting a link that says “click here” isn’t useful for Google. Instead, make the links contextual, so make your links more along the lines of “see another recipe”.

Coming up with content for your blog

An opportunity for new content that helps also bring traffic to your site: interviews. The subject of your interview will tell their friends, it will add credibility to your site, and is always a good way to generate content if you’re out of ideas. You can ask someone a few questions via email and then post the answers on your blog. Keep in mind that videos are also great but they won’t help you with SEO as much unless there’s a transcription.

Don’t be afraid of controversy!

For photos: try Flickr – search for Creative Commons photos that allow for republishing

Blog design

What’s the difference between a blog and a website? A blog is a website. It just has posts in chronological order with the most recent on the top.

What are good themes? There are great premium themes (ones you have to pay for) including Thesis and Genesis. There are also a lot of great free themes, but there are also some really bad free themes.

Newsletters

Register with MailChimp, Constant Contact, etc. first; they will then have a plugin that you can add to your site. -

Meenews – lets you style your newsletter to match your blog. (Nick recommended)

WP-Instapay – Sales Processing and Order Fulfillment system (Sandi recommended)

How to monetize your blog

Lots of options.

  • Google Adsense – ads on your blog
  • Join ad networks in niche markets
  • Sell your items – ebooks, merchandise
  • Affiliate sites – Amazon Associates, , Commission Junction
    (Keep in mind that you need to state that you are receiving compensation for items. You can have a disclaimer page that states that the read can treat all links as endorsements.)
  • Free stuff (like ebooks) can generate business leads, mailing lists, etc.
  • The best way to monetize your site: If you are becoming an expert and getting traffic, you will gain credibility all over the place. You might be asked to speak at conferences or given other opportunities to consult or write guest blogs – all of which can bring you considerably more compensation than ads or affiliate links will ever achieve.

Building traffic

  • Need really compelling content that people want to read
  • Are people who are looking for that content able to find it?
  • Comment on other blogs
  • Do you have compelling headlines?
  • Write about issues people are searching for
  • Contribute to local print media/newsletter with links to your blog
  • Follow other blogs in your field/subject matter and see what they’re writing about (and do this regularly)

Categorizing and Tagging

Categorizing is great for SEO, especially if the category is in your URL.

Tags are not useful unless you have a strategy for using them. Each tag creates new pages and it can lead to site bloat. However, if you tag effectively, it can keep people on the site as they follow the tags like breadcrumbs.

 


 

Clark Wimberly

All of the notes and links to Clark’s presentation

Clark runs the Android and Me blog.

Backup often: use import and export; back up via FTP; backup with phpMyAdmin; store offline with VP (Vault Press) or other backup plugins.

When code editing (CSS, PHP, etc.) – Edit smarter: use a real text editor; avoid the built-in editor; practice version control; run a development server.

Test smarter: use a staging area; run it locally; do it online with subdomain; find a fancy host.

Know the loop

Own your own theme: learn the template hierarchy; create custom templates; make a child or sibling theme

Google like crazy: Answers for everything; try, try again; check the date; copy and paste and tinker

Free WordPress Theme Frameworks

Hands-On WordPress meetup 8/9/11

What is a Theme Framework?

According to the WordPress Codex, a theme framework is:

a Theme designed to be a flexible foundation for quicker WordPress development, usually serving as a robust Parent Theme for Child Themes. Some Theme frameworks can also make theme development more accessible, removing the need for programming or design knowledge with options pages.

In some cases a framework may just have robust code “under the hood” making it easier for a theme developer or designer to implement changes, but without necessarily including additional features in the admin panel. Many of these are “blank” themes with very little (to no) CSS code. These can be very powerful foundations for theme design, but are not appropriate for beginners. For others, an entire site can be designed using nothing but the options in the admin area

 

Free frameworks to help non-designers build a site:

Use the simple “check-box” interface to easily change colors, fonts, header and footer, menus, sidebars, theme width, and much more. Then, take control of your content using powerful Per Page and Per Post options, including unlimited custom widget areas. Over 15 page templates, including “Page with Posts” to show posts and content where and how you want. Easy for the newcomer, comprehensive for the expert.

Configure your custom theme: Fixed or flexible width layout, with min/max width, 0 – 4 sidebars, very browser safe (incl. IE6), create custom widget areas, import/export styles (several styles included), color pickers, over 200 options.

 

Blank frameworks:

A rich blogger friendly theme with customizable header, colors and AJAX options; and developer friendly theme with atomic templates and an elegant override hierarchy.

The ultimate in SEO-ready themes, Thematic is a highly extensible, WordPress Theme Framework featuring 13 widget-ready areas, drop-down menus, grid-based layout samples, plugin integration, shortcodes for your footer, & a whole lot more. Perfect for any blog and the starting point for theme development.

Child themes built on Thematic

Starkers is a bare-bones WordPress theme created to act as a starting point for the theme designer.

Free of all style, presentational elements, and non-semantic markup, Starkers is the perfect ‘blank slate’ for your projects, as it’s a stripped-back version of the ‘Twenty Ten’ theme that ships with WordPress.

The Whiteboard framework for WordPress is built to speed up the process of designing and developing a WordPress theme. Whiteboard does so by eliminating the time spent on a website’s generic div structure and WordPress’ back-end PHP that is common to all WordPress themes. Whiteboard also includes non-intrusive code designed to improve the overal WordPress theme in many ways, including SEO, speed, usability, and mobility.

 

A few premium WordPress frameworks:

 

Also of note:

Aaron Brazell’s “Battle of the Titans: Premium Theme Framework Smackdown” (from 2010; some info is likely outdated now).

 

If you have questions about any of this information, feel free to email me or submit your question to the WordPress Austin Google group.

Image Handling in WordPress

In today’s Hands-On WordPress meetup we discussed using the media library to upload and handle images.

Nick demonstrated the basics of adding an image using the upload/insert image option in your WordPress post/page editing window. You can modify your image title, add alternate text, add a caption, and then at the bottom you can choose the layout and size options and then finally, insert into the post.

He also demonstrated how you can go to Library under Media that allows you to batch upload a series of images ahead of time.

The media “Library” includes all images/media associated with a site; the “Gallery” is associated with an individual post or page.

You can manage a given gallery (or call one to a specific place) by using a gallery shortcode. This is a small piece of code included within square brackets [ ]. The details of different options available to you, including number of columns, display order, and so forth, can be viewed via the WordPress Codex. Shortcodes are good when you need to repeatedly place a given photo, because once you know the shortcode for an image, you can use it over and over again easily.

In your admin panel under Settings > Media Settings, you can choose the default size for each image setting (thumbnail, small, medium and large), as well as the location/name of the upload folder for your media. You can also choose the option to organize uploads into folders by date.

You can also upload music, video and PDFs using the media library.

Using featured images: how (or if) this is used is entirely theme-dependent. To select one, choose a photo by selecting ‘use as featured image’ in the media uploader. In Twenty-Eleven (the default theme for WordPress 3.2) it will place the featured image in the header image. In other themes it may place that image elsewhere on the page. It will not show up as part of the post itself, however. It will also be the image shown as a thumbnail on social media sites like Facebook.


Plugins:

  • Media Library Categories: allows you to organize your media library contents.
  • NextGEN Gallery: A very popular image plugin that allows you to organize your images into galleries not associated with posts/pages. There are also a number of plugins for NextGEN that add to its functionality by giving different slideshow/display options. One problem with NextGEN is that it creates its own media library and does not utilize the native WordPress media library, meaning you must upload all photos through NextGEN. Sandi points out that it is pretty intuitive and easy to fix mistakes, and easy to reuse images throughout your site. Also has good bulk-action options.
  • More MIME Types: allows you to specify and organize media by different file types. It will then tell the browser how to handle or display the media files.
  • Scissors Continued: expands on the WordPress media library’s functionality by allowing you to crop, rotate and resize images.


Helpful tips:

  • Add photos to media library rather than just cut and paste images into your WordPress window, and you can call up the image to use later. This will also create your thumbnail and other image sizes for additional options and functionality later.
  • Using the plugin Add from Server you can add photos and other media to your WordPress media library that have previously been uploaded via FTP.
  • Always include “alternate text” when uploading photos. This will display to anyone who doesn’t have images turned on in their browser, and will also be available to people who use screen readers to view your site. It also gives you a good boost with SEO.

For an additional resource on images, be sure to review the information provided at the WordPress Codex.

Questions? Tips you’d like to share? Suggestions for other plugins dealing with images? Please add your comments below!


Don’t forget that we have several classes coming up with Hands-On WordPress: adding and managing content; plugins; and backups and Google applications. Go to Hands-On WordPress for more information and how to sign up.

How to choose a WordPress Theme

What is a theme?

Depending on how you use it, WordPress is a blogging platform/content management system/website building software – in essence, it’s the behind the scenes code that makes a website work. Your WordPress site itself consists of content, the posts/pages/images that convey information, and a theme, which is the overall design that you choose to determine how your site will look to the outside world. You do not (usually) change the underlying WordPress code (or need to reinstall WP) in order to change the site’s theme, though on occasion you may need to modify your content.

Choosing a theme

Do’s:

  • Define the purpose, structure and audience for your website.
  • Consider your branding (logo, design, etc. of your print materials, signage as well as message)
  • Who is the primary audience? What characteristics define them?
  • What is your site’s purpose? Blog? News? Gallery/portfolio? Sales?
  • What features do you need on the site? Social media? Shopping cart? Forms?
  • Determine the basic structure for your site: wireframing


Don’ts:

  • Choose a theme solely based on color, fonts, or graphics.
  • Obsess about it being ‘perfect’ (to the point where you don’t have a functioning website!)
  • Give up.

Other questions to consider:

  • What kind of media and what is most important/prominent? Text/Photos/Audio/Video
  • What kind of navigational structure do you need? How do you want your menu bar to work (e.g. drop downs)? Do you need a special way to display categories/tags, comments, or multiple authors? Do you want a sidebar – or multiple sidebars? Widgeted footers or headers?
  • How important is a custom(ized) design?
  • What is your own skill level for adding your own features/modifying a theme’s design? Are you willing to pay a developer/consultant to work with you or do you need to be self-sufficient? Are you willing to read documentation or contact support (if provided)?
  • How much are you willing to pay for a theme? Do you need/want support from the theme developer?

When you find a theme you (think) you like:

  • Does it offer the customization you need? Can you change layout, font and/or colors from the admin panel? Can you move the sidebar or increase/decrease number of sidebars/columns, or upload your own header graphic? With CSS and PHP skills, all of these things can usually be modified, but if you don’t have those skills (or don’t want to pay someone) then it’s good to have the options at your fingertips.
  • Is it GPL? (See http://wordpress.org/about/license/ )
  • Can you remove/alter the theme designer’s info/logo in the footer?
  • Can you figure out how to use any special features like a slideshow option?
  • Can you alter other elements or add your own as needed?
  • Is there a forum or other online support? Is the theme developer available to answer questions through their own website (some do it via comments) or via email?
  • Upload and activate your new theme with your own content. Does anything immediately break (often the navigation bar is the first to go) and if so, can you work around it?

Resources from WordPress.org:

Sites/products discussed at the meetup:
(note: inclusion here does not imply that WP Austin recommends any of the following; they are listed here solely as reference).


Choosing a theme worksheet (PDF file)


Security – Backing-Up Your Site

This entry is part 4 of 4 in the series WordPress Security

Install a plugin or use cronjob to create database and file backups on a regular basis. This may not be directly related to security, but in case you detect intrusion, you will be glad you make a backup.

I personally like BackWPup.

Security – Locking Down Your Site

This entry is part 3 of 4 in the series WordPress Security

Hide WordPress Version in the Header Tag

Although you have deleted the WordPress version meta data from your theme, you may still get WordPress version line in the page returned by the blog software. The culprit is, since version 2.5 WordPress has added the feature to generate this code.

Add the following line to the functions.php file in your theme directory: (Create a blank PHP file with this name if your theme doesn’t already have one)

<?php remove_action('wp_head', 'wp_generator'); ?>
It is important to note that even with all of those above implemented, there is no guarantee that your blog will be safe. Just that you decrease the chance tremendously and discourage those crackers from targeting your blog.

New exploits are discovered every so often and when a fix has not been made available yet, everyone is at risk. However, by implementing all or some of the tips above, at the very least it should give you peace of mind that you are not leaving your house unlocked.

I recommend the plugin Better WP Security which is easy to use and configure, and does many of the security functions for you.

Security – Proper WordPress Installation

This entry is part 2 of 4 in the series WordPress Security

Change The Default “Admin” Username

The problem
Brute force is one of the easiest ways to break a password. The method is simple: try as many different passwords as possible until the right one is found. Users of the brute force method use dictionaries, which give them a lot of password combinations.

Knowing your username makes it easier for them to guess the right combination. This is why you should always change the default “admin” username to something harder to guess.

Versions of WordPress starting with 3.0 let you choose your desired username by default, so there should be no excuse for not doing it right. If you have a site that was created with an older version, Admin renamer extended.

Pick Secure Password for Admin

Changing your admin username to something else is not a guarantee that people will not be able to guess it. For instance, if you use your username as the displayed meta data in every post, or you enable author specific page in multi-author blog, you will reveal your user name to the world.
With that assumption, you should pick secure password for your WordPress login. Combine upper and lowercase characters and numbers.

You can change your password after your site is installed. You may even want to to change it on a regular basis. I recommend the plugin WP Security Scan because it has a password generator.

Populate wp-config.php Properly

Go through each line in wp-config.php, not only the first block for database configuration.

Use WordPress secret key generation tool to generate random salts for WordPress cookies. These keys are used to insure better encryption of information stored in WordPress user’s cookies.

There is an automatic generator for these at: https://api.wordpress.org/secret-key/1.1/salt/

You also want to modify the WordPress table prefix to something other than wp_. Adding random characters and numbers to the end of wp, such as wpRbX3i_ obfuscates it enough but still allows you to recognize the tables as those belong to WordPress.

Security – Prevent Directory Browsing

This entry is part 1 of 4 in the series WordPress Security

By default, most hosts allow directory listing. Because there are a standard set of directories in a WordPress installation, the hacker can go directly to the directory inside your site and see all of the files in that directory. This is definitely a security risk, because a hacker could see the last time that files were modified and access them.

This is a simple but important problem to fix. You have three options:

  1. Place an empty file in each directory with the name INDEX.HTML or INDEX.PHP
  2. If you are using an Apache webserver, modify your .htaccess file
  3. Use a Security plugin (see the end of the series for suggestions)

 

Security – The Mind of a Hacker

In class I will show you a few of the ways a hacker finds vulnerabilities in websites.  I will not include that information here because all I want to do is illustrate the no one is immune, not teach you how to hack.

Most often hacking is a crime of opportunity – like an open gate or unlocked car door. In general the hacking process involves three steps:

  1. Find a point of entry
  2. Compare the website / server information to know vulnerabilities
  3. Have fun

The hacker doesn’t even have to know what he or she is doing. There are many programs that can be found on hacker sites that go through this process automatically. Thesw are popular with novice, juvenile, or dilitante hackers. Because they often don’t require any sophisticated understanding to operate, the people who use them are held in very low regard by the “real” hacker community, and are referred to by the derrogitory term “script kiddies.” That does not mean they can’t do some very real damage to your website.

The important point to understand is that these individuals are not targeting your website – you are just one of thousands. It is strictly a numbers game, and some day yours may come up.

In this next piece we will look at a common point of entry for hackers.