Install and Setup Wordpress

Installation

Download Source

https://wordpress.org/download/ (Please install the english (US) Version of Wordpress)

Setup Wizard

Step 1

Error creating thumbnail: File missing

Database Name

The Project ID, see Creating Databases.

User Name

A strong Username, see Creating Databases

Password

A strong Password, see Creating Databases

Database Host

local- or Databasehost

Table Prefix

a min. 5 char random string followed by a _. E.g. W6sJ8_

Step 2

Securing the first/admin user is very important! Please continue with the following principles:

Error creating thumbnail: File missing

Username

Use a Password like (see creating Passwords) min. 13 char long Username, e.g. rn4kiYIWkpw4m

Password

Use a very strong Password (see creating Passwords), min 26 char long. e.g. 068H%TBl*Vs+0Df3-*ZCM%6m1,

Step 3

Store all created User/Database-Names and Password secure.

Harden your installation

Update Unique Keys and Salts

Open wp-config.php and create unique "Authentication Unique Keys and Salts" as described.

Hide WordPress Version

Open your functions.php file and add in this line of code.

<?php remove_action('wp_head', 'wp_generator'); ?>

Change File Permissions

CHMOD everything to 755/644, take care the files have the right user (usually www-data)

For Directories

find /path/to/your/wordpress/install/ -type d -exec chmod 755 {} \;

For Files

find /path/to/your/wordpress/install/ -type f -exec chmod 644 {} \;

Lockdown the admin area

Create wp-admin/.htaccess with the following content

<Files wp-login.php>
order deny,allow
Deny from all
 # Whitelist Your IP address
 allow from xx.xx.xx.xxx
 # Whitelist our Office's IP address
 allow from xx.xx.xx.xxx
</Files>

Mandatory plugins

Google XML Sitemaps

https://wordpress.org/plugins/google-sitemap-generator/

iThemes Security

https://wordpress.org/plugins/better-wp-security/

W3 Total Cache

https://wordpress.org/plugins/w3-total-cache/

• Make sure the Hosting supports APC (http://de.wikipedia.org/wiki/Alternative_PHP_Cache).
• May the hosting supports https://developers.google.com/speed/pagespeed/module
• Discuss to use a CDN (e.g. AWS S3 or CloudFront)

W3 Total Cache Purge All Page

https://wordpress.org/plugins/w3-total-cache-purge-all-post/

WP-Optimize

https://wordpress.org/plugins/wp-optimize/

WP Robots Txt

https://wordpress.org/plugins/wp-robots-txt/

wpSEO

https://wpseo.de/

WP Smush

https://wordpress.org/plugins/wp-smushit/

Recommended Plugins

Carrington Build

https://crowdfavorite.com/carrington-build/

WP Retina 2x

https://wordpress.org/plugins/wp-retina-2x/

User Role Editor

https://wordpress.org/plugins/user-role-editor/

Simple Login Log

https://wordpress.org/plugins/simple-login-log/

Simple Image Sizes

https://wordpress.org/plugins/simple-image-sizes/

Advanced Custom Fields

https://wordpress.org/plugins/advanced-custom-fields/ http://www.advancedcustomfields.com/pro http://www.advancedcustomfields.com/add-ons

ARYO Activity Log

https://wordpress.org/plugins/aryo-activity-log/

Domain Mapping System

https://wordpress.org/plugins/domain-mapping-system/

Duplicate Post

https://wordpress.org/plugins/duplicate-post/

Enable Media Replace

https://wordpress.org/plugins/enable-media-replace/

Media File Renamer

https://wordpress.org/plugins/media-file-renamer/

Good Wordpress Ressources and Tutorials

Plugin Development

http://wp.tutsplus.com/uncategorized/3-5-hours-of-wordpress-plugin-development-training/

Performance Improvement

[1]