Sonya Lynn Designs

Blogging McBloggerson

Sonya Lynn's recommended Wordpress plugins.

PasswordLess Login

iThemes Security Pro offers an option to enable ‘passwordless login‘. This feature sends an email with a secure link that allows users to login without entering a password.

You can also allow Two-Factor Bypass for Passwordless Login. This is an add-an option to bypass two-factor authentication when using passwordless login in the WordPress user profile.

iThemes Security Pro PasswordLess Login Options

I’ve found both of these options to be helpful for those times you don’t want to dig around looking for your password. I get sad when I realize I forgot to turn it on for a client.

Lesson: Turn on Passwordless Login.

WordPress Website Security

Keeping your website secure is important. There are many things that can happen to a website, so it’s good to be on guard.

Common WordPress Security Issues

  1. Brute Force Attacks
  2. File Inclusion Exploits
  3. SQL Injections
  4. Cross-Site Scripting (XSS)
  5. Malware

View this great in-depth article about WordPress security issues, including actions you can take today to protect your WordPress website. https://ithemes.com/wordpress-security-issues/

WordPress Security Plugins

There are a lot of security plugins out there to chose from. I’ve been using iThemes security plugin for all of my websites. iThemes security professional plugin has a lot of great features for securing your website. For more information, visit iThemes security website.

7 WordPress Website Maintenance Tips

Here’s a list of routine website administration tasks I complete on a regular basis for every website I maintain.

Backup your website.

There’s many ways to backup your website these days. However you do it, make sure you do it! Also, keep an eye on how many backups are saved in your server, these can take up a lot of space.

I like to use Backup Buddy to backup all of my websites. With this premium plugin you can schedule complete or partial backups and automatically delete old backup files. It also has some great website migration features for if and when you need to move your website to another server.

Upgrade to the newest version of WordPress.

To keep your website secure and running efficiently, I recommend always keeping your WordPress version up-to-date.

Update your WordPress theme.

Always stay updated on new theme version releases, and update your theme when the new releases come out!

I recommend using a theme framework you can trust like Studiopress, and create a custom child theme for your style edits. This way, you can keep the framework updated without over-writing any code.

Update all WordPress plugins.

WordPress will usually show you notifications when plugins come out with new versions, and a lot of the times you will have to manually update premium plugins. I recommend keeping a log of plugin updates as well as good documentation on how to update the premium plugins you use.

If you have to manage more than one website, these updates can seem never-ending. I like to use iTheme’s sync module to easily backup and update multiple websites in one place.

Optimize the website database.

I’ve been using the WP-DBManager plugin for website database management. The plugin author recommends that your website’s database should be optimized once every month. Activate the plugin, go to the “Optimize DB” setting and click OPTIMIZE! This plugin also does database backups, and has the ability to drop tables if needed.

Check your security settings.

This really is a whole other post about how to keep your site secure, and it’s worth mentioning that checking your security settings routinely is always a good idea and should be part of the maintenance process. Plugin settings change and evolve when plugin updates come out, so I always like to keep an eye on the security settings to make sure I’m running the iTheme security plugin at it’s highest potential.

Delete all un-used files.

This is really a bonus step that I’ve found to be necessary for some websites. Sometimes old unused files end up on your server, I’ve seen it happen! You may find a duplicate copy of your website backed up on your server, or someone may have moved an old plugin or theme folder to a different folder preventing them from receiving the recommended updates.

Routinely make sure you delete these extra files from your server, and only do this if you know what you are doing! Keeping your website directory free of static files will help keep your website secure. It will also speed up your website as well, so why not trim the fat from your website!?

Whenever I’m troubleshooting websites for any problems, these steps above are necessary when finding solutions. For example, it’s hard to get answers from support forums when you are running out-dated software versions. Backup your website, stay secure and up to date and you’ll have less problems!