Install and Setup Wordpress

Installation

Download Source

https://wordpress.org/download/ (Please install the english (US) Version of Wordpress)

Setup Wizard

Step 1

Error creating thumbnail: File missing

Database Name

The Project ID, see Creating Databases.

User Name

A strong Username, see Creating Databases

Password

A strong Password, see Creating Databases

Database Host

local- or Databasehost

Table Prefix

a min. 5 char random string followed by a _. E.g. W6sJ8_

Step 2

Securing the first/admin user is very important! Please continue with the following principles:

Error creating thumbnail: File missing

Username

Use a Password like (see creating Passwords) min. 13 char long Username, e.g. rn4kiYIWkpw4m

Password

Use a very strong Password (see creating Passwords), min 26 char long. e.g. 068H%TBl*Vs+0Df3-*ZCM%6m1,

Step 3

Store all created User/Database-Names and Password secure.

Harden your installation

Update Unique Keys and Salts

Open wp-config.php and create unique "Authentication Unique Keys and Salts" as described.

Hide WordPress Version

Open your wp-includes/functions.php file and add in this line of code.

<?php remove_action('wp_head', 'wp_generator'); ?>

Change File Permissions

CHMOD everything to 755/644, take care the files have the right user (usually www-data)

For Directories

find /path/to/your/wordpress/install/ -type d -exec chmod 755 {} \;

For Files

find /path/to/your/wordpress/install/ -type f -exec chmod 644 {} \;

Lockdown the admin area

Create wp-admin/.htaccess with the following content

<Files wp-login.php>
order deny,allow
Deny from all
 # Whitelist Your IP address
 allow from xx.xx.xx.xxx
 # Whitelist our Office's IP address
 allow from xx.xx.xx.xxx
</Files>

Default plugins

https://wiki.parasol-island.com/images/1/14/1708_wordpress_default_plugins.zip

Google XML Sitemaps

https://wordpress.org/plugins/google-sitemap-generator/

WP Robots Txt

https://wordpress.org/plugins/wp-robots-txt/

Recommended Plugins

Visual Composer: Page Builder for WordPres

http://codecanyon.net/item/visual-composer-page-builder-for-wordpress/242431

Good Wordpress Ressources and Tutorials

Plugin Development

http://wp.tutsplus.com/uncategorized/3-5-hours-of-wordpress-plugin-development-training/

Performance Improvement

http://wp.tutsplus.com/tutorials/the-ultimate-quickstart-guide-to-speeding-up-your-wordpress-site/

Content-Pflege

• Während der Entwicklung ohne Live-Version auf "Stage"
• Während dem Live-Betrieb immer auf "Live"

Caching Wordpress

Bytecode Cache / PHP OPcache

Caches the compilation of php scripts. Bytecode Caches are APC (deprecated), APCu and OPcache. Recomended: OPcache.

Variable and Session Caching

Caches Variables and Session in memory and in a central storage to allow e.g. multiple webheads. Variable and Session Caches are memcached or Redis. Recomended: Redis.

Page Caching

Caches an entire page to prevent php or MySQL calls while accessing the page. Page Caches are Varnish or nginx FastCGI.

Caching Plugins

The Caching Plugin controls the to be cached CMS content, e.g. minifying it upfront. Caching Plugins are WP Rocket or WP Super Cache. Recomended: WP Rocket.