Install and Setup Wordpress
Download Source
https://wordpress.org/download/ (Please install the english (US) Version of Wordpress)
Setup Wizard
Step 1
Error creating thumbnail: File missing
Database Name
The Project ID, see Creating Databases.
User Name
A strong Username, see Creating Databases
Password
A strong Password, see Creating Databases
Database Host
local- or Databasehost
Table Prefix
a min. 5 char random string followed by a _. E.g. W6sJ8_
Step 2
Securing the first/admin user is very important! Please continue with the following principles:
Error creating thumbnail: File missing
Username
Use a Password like (see creating Passwords) min. 13 char long Username, e.g. rn4kiYIWkpw4m
Password
Use a very strong Password (see creating Passwords), min 26 char long. e.g. 068H%TBl*Vs+0Df3-*ZCM%6m1,
Step 3
Store all created User/Database-Names and Password secure.
Harden your installation
Update Unique Keys and Salts
Open wp-config.php and create unique "Authentication Unique Keys and Salts" as described.
Hide WordPress Version
Open your functions.php file and add in this line of code.
<?php remove_action('wp_head', 'wp_generator'); ?>
Change File Permissions
CHMOD everything to 755/644, take care the files have the right user (usually www-data)
For Directories
find /path/to/your/wordpress/install/ -type d -exec chmod 755 {} \;
For Files
find /path/to/your/wordpress/install/ -type f -exec chmod 644 {} \;
Lockdown the admin area
Create wp-admin/.htaccess with the following content
<Files wp-login.php> order deny,allow Deny from all # Whitelist Your IP address allow from xx.xx.xx.xxx # Whitelist our Office's IP address allow from xx.xx.xx.xxx </Files>
Mandatory plugins
iThemes Security
https://wordpress.org/plugins/better-wp-security/
W3 Total Cache
https://wordpress.org/plugins/w3-total-cache/
- Make sure the Hosting supports APC (http://de.wikipedia.org/wiki/Alternative_PHP_Cache).
- May the hosting supports https://developers.google.com/speed/pagespeed/module
- Discuss to use a CDN (e.g. AWS S3 or CloudFront)
W3 Total Cache Purge All Page
https://wordpress.org/plugins/w3-total-cache-purge-all-post/
Google XML Sitemaps
https://wordpress.org/plugins/google-sitemap-generator/
WP-Optimize
https://wordpress.org/plugins/wp-optimize/
WP Robots Txt
https://wordpress.org/plugins/wp-robots-txt/
wpSEO
WP Smush
https://wordpress.org/plugins/wp-smushit/
WP-Mail-SMTP
https://wordpress.org/plugins/wp-mail-smtp/
Error creating thumbnail: File missing
From Email: {domain}@parasol-island.com
From Name: {domain}
Mailer: "Send all WordPress emails via SMTP."
Return Path: -
SMTP Options
SMTP Host: smtp.mandrillapp.com
SMTP Port: 587
Encryption: "Use TLS encryption. This is not the same as STARTTLS. For most servers SSL is the recommended option."
Authentication: "Yes: Use SMTP authentication."
Konfiguration: Smtp
Recommended Plugins
Carrington Build
https://crowdfavorite.com/carrington-build/
WP Retina 2x
https://wordpress.org/plugins/wp-retina-2x/
User Role Editor
https://wordpress.org/plugins/user-role-editor/
Simple Login Log
https://wordpress.org/plugins/simple-login-log/
Simple Image Sizes
https://wordpress.org/plugins/simple-image-sizes/
Advanced Custom Fields
https://wordpress.org/plugins/advanced-custom-fields/ http://www.advancedcustomfields.com/pro http://www.advancedcustomfields.com/add-ons
ARYO Activity Log
https://wordpress.org/plugins/aryo-activity-log/
Domain Mapping System
https://wordpress.org/plugins/domain-mapping-system/
Duplicate Post
https://wordpress.org/plugins/duplicate-post/
Enable Media Replace
https://wordpress.org/plugins/enable-media-replace/
Media File Renamer
https://wordpress.org/plugins/media-file-renamer/
Good Wordpress Ressources and Tutorials
Plugin Development
http://wp.tutsplus.com/uncategorized/3-5-hours-of-wordpress-plugin-development-training/
Performance Improvement
http://wp.tutsplus.com/tutorials/the-ultimate-quickstart-guide-to-speeding-up-your-wordpress-site/
Content-Pflege
- Während der Entwicklung ohne Live-Version auf "Stage"
- Während dem Live-Betrieb immer auf "Live"