Install and Setup Wordpress
Installation
Download Source
https://wordpress.org/download/ (Please install the english (US) Version of Wordpress)
Setup Wizard
Step 1
Error creating thumbnail: File missing
Database Name
The Project ID, see Creating Databases.
User Name
A strong Username, see Creating Databases
Password
A strong Password, see Creating Databases
Database Host
local- or Databasehost
Table Prefix
a min. 5 char random string followed by a _. E.g. W6sJ8_
Step 2
Securing the first/admin user is very important! Please continue with the following principles:
Error creating thumbnail: File missing
Username
Use a Password like (see creating Passwords) min. 13 char long Username, e.g. rn4kiYIWkpw4m
Password
Use a very strong Password (see creating Passwords), min 26 char long. e.g. 068H%TBl*Vs+0Df3-*ZCM%6m1,
Step 3
Store all created User/Database-Names and Password secure.
Harden your installation
Update Unique Keys and Salts
Open wp-config.php and create unique "Authentication Unique Keys and Salts" as described.
Hide WordPress Version
Open your wp-includes/functions.php file and add in this line of code.
<?php remove_action('wp_head', 'wp_generator'); ?>
Change File Permissions
CHMOD everything to 755/644, take care the files have the right user (usually www-data)
For Directories
find /path/to/your/wordpress/install/ -type d -exec chmod 755 {} \;
For Files
find /path/to/your/wordpress/install/ -type f -exec chmod 644 {} \;
Lockdown the admin area
Create wp-admin/.htaccess with the following content
<Files wp-login.php> order deny,allow Deny from all # Whitelist Your IP address allow from xx.xx.xx.xxx # Whitelist our Office's IP address allow from xx.xx.xx.xxx </Files>
Default plugins
https://wiki.parasol-island.com/images/1/14/1708_wordpress_default_plugins.zip
Google XML Sitemaps
https://wordpress.org/plugins/google-sitemap-generator/
WP Robots Txt
https://wordpress.org/plugins/wp-robots-txt/
Recommended Plugins
Visual Composer: Page Builder for WordPres
http://codecanyon.net/item/visual-composer-page-builder-for-wordpress/242431
Good Wordpress Ressources and Tutorials
Plugin Development
http://wp.tutsplus.com/uncategorized/3-5-hours-of-wordpress-plugin-development-training/
Performance Improvement
http://wp.tutsplus.com/tutorials/the-ultimate-quickstart-guide-to-speeding-up-your-wordpress-site/
Content-Pflege
- Während der Entwicklung ohne Live-Version auf "Stage"
- Während dem Live-Betrieb immer auf "Live"
Caching Wordpress
Bytecode Cache / PHP OPcache
Caches the compilation of php scripts. Bytecode Caches are APC (deprecated), APCu and OPcache. Recomended: OPcache.
Variable and Session Caching
Caches Variables and Session in memory and in a central storage to allow e.g. multiple webheads. Variable and Session Caches are memcached or Redis. Recomended: Redis.
Page Caching
Caches an entire page to prevent php or MySQL calls while accessing the page. Page Caches are Varnish or nginx FastCGI.
Caching Plugins
The Caching Plugin controls the to be cached CMS content, e.g. minifying it upfront. Caching Plugins are WP Rocket or WP Super Cache. Recomended: WP Rocket.