WP-Tonic | WordPress | SaaS  | Bootstrap SaaS | Startups

WP-Tonic | WordPress | SaaS | Bootstrap SaaS | Startups

By Jonathan Denwood & Kurt von AhnenBusinessTechnologyEducation
Download on the App Store

WP-Tonic | WordPress | SaaS | Bootstrap SaaS | Startups episodes

  • 148 Processes for Client Web Projects

    Our weekly Saturday round-table focuses on the processes we use to intake clients, design and develop websites, test and launch, and have ongoing relationships.

    What are the tools they use? And what are the internal processes that the panel have developed to help them manage projects?

    The panel this week:

    Lee Jackson https://trailblazer.fm

    Sallie Goetsch https://www.wpfangirl.com/

    John Locke Lockedown SEO

    Jonathan Denwood https://www.wp-tonic.com/

     

    Episode 148 Table of Contents:

    0:00 Podcast Intros

    1:13 WordPress News Story #1: Flywheel Acquires WordPress Local Development Tool Pressmatic

    https://wptavern.com/flywheel-acquires-wordpress-local-development-tool-pressmatic

    9:42 WordPress Story #3: PDF Image Previews Among the Improvements to Media in WordPress 4.7

    https://wptavern.com/pdf-image-previews-among-the-improvements-to-media-in-wordpress-4-7

    19:55 WordCamp 2016 2 to 4th of December 2016

    https://2016.us.wordcamp.org/

    23:10 The processes for the various stages of web projects.

    23:58 Our processes for getting clients to sign on the line that is dotted.

    38:35 What does your client onboarding process look like?

    51:49 What does the creative phase of the project look like? What comes first, middle, and last? Content first or design first?

    1:10:02 Podcast outros

    ===================

     

    Links mentioned during the show:

    Announcement: Leadpages Has Acquired Drip

    https://www.leadpages.net/blog/drip-acquisition/

    WP Media Folder - Media manager with folders

    https://www.joomunited.com/wordpress-products/wp-media-folder

    Mike Monteiro: F*ck You, Pay Me

    https://www.youtube.com/watch?v=jVkLVRt6c1U

    WPBuilds Episode 3: Clients from heaven (not)

    https://wpbuilds.com/2016/12/02/episode-3-clients-from-heaven-not/

    WP Innovator: Our WordPress Website Build Process

    https://trailblazer.fm/building-process/

    How to Write a Book: The Secret to a Super Fast First Draft

    http://www.smartpassiveincome.com/tv/how-to-write-a-book-fast-first-draft/

    Seanwes Episode 13: You Design the Content

    http://seanwes.com/podcast/013-you-design-the-content/

    Freedcamp

    https://freedcamp.com

    Pocketcasts

    https://www.shiftyjelly.com/pocketcasts/

    Browserstack

    https://www.browserstack.com/

    Heering - The Original Cherry Liqueur

    http://www.heering.com/

    ===================

     

    Find bonus content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/148-web-design-processes-client-projects/

     

    ===================

     

    Subscribe to WP-Tonic on iTunes

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

     

    ===================

     

    WP-Tonic is both a WordPress maintenance and support service, and also publishers of a twice weekly business-focused WordPress podcast where we talk with some of the brightest minds in WordPress development and online marketing.

    1 hr 15 min
  • 147 Justin Busa and Robby McCullough of Beaver Builder

    Two of the founders of Beaver Builder: Justin Busa and Robby McCullough, share the history of the company and their future plans. There is a lot to learn about launching product in this great conversation.

    Beaver Builder:

    https://www.wpbeaverbuilder.com/

     

    Episode 147 Table of Contents

    0:00 Podcast Intros

    1:43 The origin story of Beaver Builder and how the founders met.

    3:32 What were the challenges moving from client services to a product company?

    5:32 How do you know when you're at the tipping point with your product? How scary is it to pull the trigger and go all in?

    8:20 Was Beaver Builder being targeted at agencies from the start? How did you market Beaver Builder in the early days?

    10:21 What did you do to get the product in front of people at first?

    13:35 Were you surprised when you saw third-party developers building products for Beaver Builder?

    15:18 Are you in close communication with third-party developers? How do you plan your roadmap for the product?

    17:01 What are the challenges of building a consistent community around a product?

    20:16 When it comes to the moderators in your Facebook group, do you have certain people that you rely on to help you out with the community?

    22:17 Were there any web technologies that came out that allowed you to build Beaver Builder? What conditions created the perfect storm that allowed you to create Beaver Builder at the time you did?

    25:49 When did you realize your target audience wasn't who you thought it was at first?

    29:15 How does product support look as compared to client support? How did you grow your support structure as time went on?

    33:31 When planning a new release of Beaver Builder, how much testing do you do against popular plugins? What does your testing process look like?

    37:21 As WordPress expands its market share, will more people use page builders? Will the purist developer push back against page builders remain or diffuse over time?

    43:51 Podcast outros

    ======================

     

    Links mentioned during the show:

    Beaver Builder Facebook Group

    https://www.facebook.com/wpbeaverbuilder/

    Upwork

    https://www.upwork.com/

     

    ======================

     

    Find bonus content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/147-wp-tonic-justin-busa-and-robby-mccullough-of-beaver-builder/

     

    ======================

     

    Be sure to leave a detailed review for WP-Tonic on iTunes:

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

     

    ===================

     


    WP-Tonic is the publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

    47 min
  • 146 Our Favorite Web Agency Tools

    We have a great round table show with special guest Lee Jackson of the WP Innovator podcast. We talk all about the tools that we use daily to help us run our businesses. We look at a number of different categories from invoicing to project management tools.

     

    The panel this week:

    Lee Jackson https://trailblazer.fm

    Jackie D'Elia https://jackiedelia.com/

    Jonathan Denwood https://www.wp-tonic.com/

    Sallie Goetsch https://www.wpfangirl.com/

    John Locke Lockedown SEO

     

    ======================

    Episode 146 Table of contents:

     

    0:00 Podcast intros

    1:43 WordPress News Story #1: Elementor Pro – Things Have Changed

    http://snifflevalve.com/elementor-pro-things-have-changed/

    15:11 Our picks for accounting and invoicing.

    24:51 What do we use for writing proposals?

    34:49 What are our choices for CRMs?

    40:42 What are we using for project management software?

    59:00 What do we use for time tracking? What tasks do we actually track time for?

     

    ======================

    Links Mentioned in WP-Tonic: Episode 146

    Visual Builders

    Elementor

    https://elementor.com/

     

    Beaver Builder

    https://www.wpbeaverbuilder.com/

     

    Invoicing and Accounting

    Free Agent

    https://www.freeagent.com/

     

    ClearBooks

    https://www.clearbooks.co.uk/

     

    Harvest

    https://www.getharvest.com/

     

    WP-Invoice

    https://wordpress.org/plugins/wp-invoice/

     

    FreshBooks

    https://www.freshbooks.com/

     

    Zoho

    https://www.zoho.com/invoice/

     

    QuickBooks Online

    https://quickbooks.intuit.com/online/

    https://www.quicken.com/personal-finance/quicken-home-business-2017

     

    Wave Accounting

    https://www.waveapps.com/

     

    Sprout Invoices

    https://sproutapps.co/sprout-invoices/

     

    Contracts and Proposals

    Contract Killer

    https://gist.github.com/malarkey/4031110

     

    WP Elevation

    http://www.wpelevation.com/

     

    UK contracts

    http://simply-docs.co.uk/Home

     

    Forming a LLC

    http://www.nolo.com/legal-encyclopedia/form-llc-how-to-organize-llc-30287.html

     

    CRMs

    Active Campaign

    http://www.activecampaign.com/

     

    Agile CRM

    https://www.agilecrm.com/

     

    Contactually

    http://www.contactually.com/

     

    Project Management and team communication

    iTask 3

    https://www.itaskx.com/en/index.aspx

     

    Freedcamp

    https://freedcamp.com/

     

    Teamwork

    https://www.teamwork.com/

    https://www.teamworkdesk.com/

     

    Asana

    https://asana.com/

     

    Google Apps for Work (G Suite)

    https://gsuite.google.com/index.html

     

    Basecamp

    https://basecamp.com/

     

    Slack

    https://slack.com/

     

    Trello

    https://trello.com/

     

    Wunderlist

    https://www.wunderlist.com/

     

    Zoom

    https://zoom.us/

    Time Tracking

    Toggl

    https://toggl.com/

     

    Social Media Management

    Edgar

    https://meetedgar.com

     

    SociPress

    http://socipress.com/

     

    Client Research

    Charlie App

    https://charlieapp.com/

     

    Mailshake

    https://mailshake.com/

     

    Hunter.io

    https://hunter.io/search

     

    SEO / Keyword research

     

    app.KWfinder.com

    https://app.kwfinder.com/

     

    SERPs keyword rank checker

    https://serps.com/tools/rank-checker/

     

    Ahrefs

    https://ahrefs.com/

     

    Content Creation/Proofreading

    Grammarly

    https://www.grammarly.com/

     

    Bear APP

    https://itunes.apple.com/us/app/bear-beautiful-writing-app/id1091189122?mt=12

    http://www.bear-writer.com/

     

    Client website management

     

    CMS Commander

    https://cmscommander.com/wp

     

    Manage WP

    https://managewp.com/

     

    Main WP

    https://mainwp.com/

     

    Website backups

    BlogVault

    https://blogvault.net/

     

    Duplicator

    https://wordpress.org/plugins/duplicator/

     

    WordPress theme development

    ACF

    http://www.advancedcustomfields.com/

     

    Migrate DB Pro

    https://deliciousbrains.com/wp-migrate-db-pro/

     

    ===============

     

    Find bonus content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/146-web-agency-tools/

     

    ===================

     

    Subscribe to WP-Tonic on iTunes

    https://itunes.apple.com/us/podcast/wordpress-wp-tonic-jonathan/id893083124

     

    ===================

     

    WP-Tonic is the publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

    1 hr 17 min
  • 145 Lee Jackson, The WP Innovator

    This Week We fun and insightful Interview with Lee Jackson host of the WP Innovator podcast & the owner of a highly successful WordPress development agency that exclusively only works with other digital agencies.

     

    You can find Lee at his website: http://leejacksondev.com/ .

    Be sure to check out his podcast at: http://leejacksondev.com/podcast/ .

     

    Table of Contents for Episode 145

    0:00 Podcast intros

    1:15 Lee Jackson Dev is an agency for print and design agencies. How does Lee find those perfect clients?

    3:50 What is the big advantage for design-focused agencies to bringing in Lee's agency as a trusted partner?

    6:20 What is one of the most surprising things that Lee has found partner agencies want him to do?

    7:45 What are the big differences between a freelancer and a bona fide agency when it comes handling a client brief?

    9:55 How did Lee earn the trust to be in client meetings with partner agencies (who own the client relationships)?

    12:04 Is there ever a reluctance with agencies to have a subcontracting or partner agency come into the client meetings?

    13:23 Bobbins and biscuits.

    13:58 Why are many web agencies not that great at writing briefs?

    17:46 What to do when the client doesn't want to invest in a brief. How Lee writes user stories into his briefs, and making it part of the technical specs.

    21:53 The origin story of Lee Jackson Dev.

    24:54 How does the role of an agency founder /owner change as the agency grows?

    27:21 What does Lee's agency hiring process look like?

    29:30 What are the most common mistakes when it comes to project management in web agencies?

    31:42 The biggest financial mistake that agencies make in web design projects.

    32:21 One huge mistake (opportunity?) for web agencies when they hand off the design to the developers.

    34:03 Why underbidding hurts web design projects so much. How a Statement of Work helps prevent scope creep.

    38:15 How does Lee feel about paid discovery? What about the tender process? (Similar to RFP).

    40:57 The tendering process leads to chronic underbidding.

    41:42 Podcast outros

     

    ===================

    Find bonus content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/145-lee-jackson-wp-innovator/

    ===================

     

    Subscribe to WP-Tonic on iTunes

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

    ===================

    WP-Tonic is both a WordPress maintenance and support service, and also publishers of a twice weekly WordPress podcast where we talk with some of the brightest minds in WordPress development and online marketing.

    45 min
  • 144 Qualities of High End WordPress Hosting

    AJ Morris of Liquid Web joins our Saturday panel as we discuss the qualities of high-end WordPress hosting.

    We find out what differentiates a high end managed WordPress host from the average hosting companies that cost a few bucks a month. Why is it important to have a quality web host? What are you looking for in web hosting for your WordPress website? We'll answer these questions and many more.

     

    Our panel this week:

     

    AJ Morris of Liquid Web (@ajmorris on Twitter)

    Jackie D'Elia of Jackie D'Elia Design (@jdelia)

    Jonathan Denwood of WP-Tonic (@jonathandenwood)

    John Locke of Lockedown Design (@Lockedown_)

     

    Episode 144 Table of Contents

    0:00 Podcast Intros

    1:50 WordPress News Story #1: Nashville to Host WordCamp US 2017-2018

    https://wptavern.com/nashville-to-host-wordcamp-us-2017-2018

     

    10:03 The .blog Bait & Switch

    http://chrisschidle.com/the-dot-blog-bait-and-switch/

     

    18:23 Upvato Backup Service Confirms Files Are Lost, Plans to Relaunch on New Provider

    https://wptavern.com/upvato-backup-service-confirms-files-are-lost-plans-to-relaunch-on-new-provider

     

    25:31 Main Topic: Qualities of High End WordPress Hosting

    25:44 What is the advantage of having a managed WordPress host vs having just regular web hosting?

    27:30 What are the differences between an inexpensive web host and a quality web hosting company?

    29:55 How do you try to convince people to improve their web hosting?

    32:58 Some interesting user stats that Liquid Web found when they did due diligence, and some great features that Liquid Web offers.

    36:07 Why WP Engine has been the market leader in WordPress hosting so far, and what Liquid Web is doing to compete with them.

    37:47 A few words about SSL and WordPress hosting.

    41:00 Some hosting companies that let you manage several client sites from one panel, and some common problems web developers face when it comes to getting clients to the right hosting package.

    48:01 How will HTTP/2 affect server configurations in the next year or two?

    50:26 Page speed is important. How do customers evaluate hosting speed stats and different benchmark studies?

    57:01 What security practices make you feel better when you are choosing a web host? What does the hosting landscape look like right now?

    1:01:12 What are the unique challenges that come with providing hosting to web agencies?

    1:05:05 The importance of technical support in web hosting.

    1:08:20 Podcast outros


    ========================

    Recommended WordPress hosting companies mentioned during the show:

    Liquid Web

    https://www.liquidweb.com/wordpress/

     

    WP Engine

    https://wpengine.com/

     

    Flywheel

    https://getflywheel.com/

     

    Kinsta

    https://kinsta.com/

     

    Siteground

    https://www.siteground.com/

     

    Pagely

    https://pagely.com/

     

    Other Links Mentioned During the Show:

     

    Let's Encrypt

    https://letsencrypt.org/

     

    Comodo SSL

    https://ssl.comodo.com/

     

    GT Metrix

    https://gtmetrix.com/

     

    Brief History of HTTP/2

    https://hpbn.co/http2/

     

    InMotion Hosting

    http://www.inmotionhosting.com/

     

    Liquid Web Intelisys Case Study

    https://www.liquidweb.com/about/featured-clients/case-studies/intelisys.html

     

    ======================

     

    Be sure to leave us a review and subscribe to the WP-Tonic WordPress podcast on iTunes:

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

    1 hr 12 min
  • 143 Gordan Orlic on Running a Successful WordPress Plugin Business

    In this powerful interview, Gordan Orlic of Web Factory Ltd discusses becoming an elite plugin author on CodeCanyon and why he's leaving the platform, and moving everything to his own website.

    Gordan pulls no punches as he talks about making the transition from getting traffic on a marketplace like CodeCanyon to setting up shop on your own.

    Find Gordan at http://www.webfactoryltd.com/ 

    Follow Gordan on Twitter on https://twitter.com/webfactoryltd

     

    Episode 143 Table of Contents

    0:00 Podcast Intros

    2:30 How did Gordan get into web development and get into building WordPress plugins?

    4:00 How did Gordan make the transition from client work to selling products?

    7:46 Niching down helps you make more money in the long run.

    10:19 Positioning and white-label plugins: ideas are garbage, having a working prototype is more valuable.

    13:36 What are the pros and cons of being on Envato vs starting a plugin shop on your own?

    22:22 Why is Envato still recovering and changing course from decisions they made five years ago?

    31:24 The one thing on Envato that confuses nearly every customer.

    35:02 CodeCanyon is a great place to start, but you can't build a brand there.

    36:30 The reason Gordan is leaving Envato and is in the process of moving his plugins to his own website.

    40:09 The thing you must accept if you piggyback on another successful platform or plugin.

    42:01 Podcast outros

    46:07 YouTube bonus content begins.

    46:08 Gordan talks about his plugin Security Ninja, what it does and who it is for.

     

    Security Ninja

    https://wordpress.org/plugins/security-ninja/

     

    56:40 What is making it tougher for plugin authors to make money on Envato right now?

    1:02:45 The one thing that sucks about marketplaces. There are many upsides, but this one thing can hurt you long-term.

     

    ===================

    Find additional content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/143-gordan-orlic-wordpress-plugins/

     

    ===================

     

    Follow WP-Tonic on iTunes and be sure to leave us a review!


    itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

    47 min
  • 142 How to Successfully Work With Non-Profits

    On this week's WP-Tonic round table, we give some insight on how to work with non-profit organizations. How is working with non-profits different than working with clients in the private sector?

    Our round table of WordPress experts also discusses the best marketing practices for non-profits.

    Our panel this week:

    Morten Rand-Hendriksen of Lynda.com
    Sallie Goetsch of WP Fangirl
    Jonathan Denwood of WP-Tonic
    John Lockeof Lockedown Design

    Show Table of Contents:
    0:00 Show Intros
    2:02 WordPress Story #1: Does Jetpack slow down a WordPress website?
    https://mattreport.com/jetpack-speed/

    20:04 WordPress Story #2: How I Built It, Episode 12: Chris Lema and Beyond Good
    https://howibuilt.it/episode-12-chris-lema-and-beyond-good/

    31:54 Main Topic: Working With Non-Profits
    32:02 What is different about working with non-profits vs working with regular businesses?
    34:14 How does the non-profit managerial structure affect timelines and the decision making process?
    36:44 Jonathan shares a link: How Nonprofits Get really Big from the Stanford Social Innovation Review
    https://ssir.org/articles/entry/how_nonprofits_get_really_big

    40:29 What unique challenges do non-profits have in establishing and achieving their marketing goals?
    44:50 How do non-profits find their target segments? How do you define personas and develop a content strategy to reach those target personas?
    48:38 What are some examples of non-profits that are doing a great job with marketing?
    51:55 What are some things that non-profits need to focus on when it comes to their website and digital marketing?
    56:20 Podcast outros
    58:49 YouTube bonus content
    58:55 More thoughts on marketing for non-profits
    1:05:00 John's experience with non-profits
    1:09:20 Quick advice on discounting and pro bono
    1:09:50 Some non-profits may be in a better position to pay you than regular businesses.
    1:11:27 Building up good will in the community by working with non-profits in your community.

    ==========================

    LInks mentioned during the show:

    If You Want Results, Think About How You Post and Share Content
    http://tacticalsocialmedia.org/post-share-content-matters/

    Ladies Learning To Code
    http://ladieslearningcode.com/

    Black Girls Code
    http://www.blackgirlscode.com/

    WEAVE, Inc.
    http://www.weaveinc.org/

    ==========================

    Find bonus content for this episode on the WP-Tonic website:
    https://www.wp-tonic.com/podcast/142-working-with-non-profits-wordpress/

    ==========================

    Subscribe to WP-Tonic on iTunes and leave us a review!
    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

    1 hr
  • 141 Heather Steele of Blue Steele Solutions

    We talk with Heather about the life-cycle of web agencies, marketing, social media, and client relationships. How do Heather and her team find the right type of clients to work with?  Why is it important to develop strong ongoing relationships in your local business community?

    I really enjoyed our chat with Heather. I could see why she has been so successful in driving her agency forward. The WordPress community has also been a key in building her business to its present level.


    Episode 141 Table of Contents


    0:00 Podcast Intros


    1:33 Who does Blue Steele Solutions serve and how did they find their niche?


    3:37 How does Blue Steele Solutions determine what clients are going to be a good fit?


    5:40 What is the value in nurturing long-term relationships with clients?


    8:55 Launching the website is not the end of the project, it's the beginning.


    9:34 How did Blue Steele Solutions grow? What is Heather's origin story?


    12:31 How does being active in the local community benefit Heather's business?


    15:57 What are some of the mistakes that people make when outsourcing their marketing?


    19:40 SEO is more than a one-time check-it-off-the-list thing. How do you select a reputable marketing or SEO company?


    23:20 What goes into building a brand?


    26:40 What can you do to attract great clients?


    29:05 The realities of digital outreach, and benefits of having a realistic traffic plan.


    34:52 How did Heather decide on WordPress as a platform? What are the benefits of WordPress over other web platforms?


    38:24 How do you build up community? In person or digitally?


    39:47 Podcast outros



    ===============


    Find bonus content for this episode on the WP-Tonic website:

    https://www.wp-tonic.com/podcast/141-heather-steele-blue-steele-solutions/



    ===================

    Subscribe to WP-Tonic on iTunes

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2


    ===================



    WP-Tonic is the publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

    44 min
  • 140 What Are the Best Practices For WordPress Security?

    In this WP-Tonic round-table we look at WordPress and security with an excellent panel of WordPress community experts.


    Our panel this week:
    Brian Jackson from https://woorkup.com/ and https://kinsta.com/
    Sallie Goetsch from https://wpfangirl.com/
    Jackie D'Elia from https://jackiedelia.com/
    Jonathan Denwood from https://www.wp-tonic.com/
    John Locke from Lockedown SEO


    Episode 140 Table of Contents
    0:00 Podcast intros
    1:50 WordPress Security – 18+ Steps to Lock Down Your Site
    https://kinsta.com/blog/wordpress-security

    3:12 Learning From Buggy WordPress Wp-login Malware
    https://blog.sucuri.net/2016/10/learning-buggy-wordpress-wp-login-malware.html

    6:49 Updating your WordPress plugins is one of the most important things you can do
    10:22 Test all plugin and theme updates on a staging server

    12:25 Surviving Electmageddon: Protecting against a wave of DNS outages
    https://www.wordfence.com/blog/2016/11/surviving-electmageddon-protecting-wave-dns-outages/
    (DDoS attacks and advantages of having a secondary DNS server)

    17:34 Securing WordPress from the Start
    https://ithemes.com/2016/11/02/securing-wordpress/

    21:29 It's a good idea to have redundant backups for your website. You can't have enough of these.

    24:35 What is one WordPress security tip that you should use right from the start?

    25:48 Brian has a story about what sort of long-lasting damage to your SEO a single hack can produce.

    27:20 Cleaning Up a Massive Negative SEO Attack with Web CEO
    https://woorkup.com/cleaning-negative-seo-attack-web-ceo/

    29:52 Changing the default login URL can prevent automated attacks. Also, always use strong passwords.

    31:11 Always check your code for hidden backlinks to spam sites.

    32: 35 We discuss Negative SEO.

    33:12 Linkpocalypse Now – The Horror of Negative SEO
    http://www.jacobking.com/negative-seo-truth

    35:05 Limit the login attempts people can make to prevent a brute force attack. Consider two-factor authentication for logins.

    36:16 Deactivate and delete any themes and plugins you're not using. Don't use the automatic WordPress install scripts that your hosting company provides.

    38:24 Many people use weak passwords, and that's why they get hacked.

    40:37 Install an audit log so you can see what activity is happening on your site. Clients will often be freaked out by how often the site is scanned.

    42:25 Don't use themes where plugins are bundled into the theme (like on ThemeForest)
    https://www.lockedownseo.com/why-we-shouldnt-bundle-wordpress-plugins-in-themes/

    43:37 Do not allow everyone on your site to have Administrator access

    46:15 XML-RPC: What is it? Why should you limit it's use? HOw do hackers use it?

    49:03 Be careful about using public Wi-Fi to FTP or login to your site. Always use HTTPS on your site to encrypt your password when logging in publicly.

    52:01 Use a virus scan on your own computer. Your computer can be an attack vector. Keep your version of PHP and MySQL versions up to date on your hosting account.

    53:48 Shared hosting is not the most secure option for hosting. Large companies with internal IT departments are also prime for attack.

    57:43 How much resistance is there with getting clients on board with WordPress security best practices?

    1:02:44 If possible, use a service like LastPass to use strong passwords.
    https://www.lastpass.com/

    1:03:40 Podcast outros

    ===============

    Other lInks mentioned during the show:

    Maximum Overdrive (imdb)
    http://www.imdb.com/title/tt0091499/

    rmoov - The Backlink Removal Tool That Helps You Clean Up Bad Links
    https://www.rmoov.com/index.php

    Unmasked: What 10 million passwords reveal about the people who choose them
    https://wpengine.com/unmasked/

    WP White Security
    https://www.wpwhitesecurity.com/

    WP Security Audit Log
    https://www.wpsecurityauditlog.com/

    Co-Authors Plus
    https://wordpress.org/plugins/co-authors-plus/

    iThemes Security
    https://ithemes.com/security/

    Google Authenticator
    https://wordpress.org/plugins/google-authenticator/

    WP Clef
    https://wordpress.org/plugins/wpclef/

    KeyCDN
    https://www.keycdn.com/


    ===============

    For bonus content on this episode, go to the WP-Tonic website:
    https://www.wp-tonic.com/podcast/140-best-practices-for-wordpress-security/

    ===================


    Subscribe to WP-Tonic on iTunes
    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2


    ===================


    WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

    1 hr 8 min
  • 139 Robert Abela from WP White Security

    In episode 139, we interview Robert Abela, founder of WP Security Audit Log, a leading WordPress auditing plugin. Robert's blog at WP White Security is a great resource for learning more about WordPress security best practices. Robert focuses on explaining website security in a way that non-technical people can understand.


    Resources:

    WP White Security
    https://www.wpwhitesecurity.com/

    WP Security Audit (WordPress plugin)
    https://www.wpsecurityauditlog.com/

    WP Security Bloggers (Aggregate feed)
    http://www.wpsecuritybloggers.com/


    Episode 139 Table of Contents


    0:00 Intros /What Robert does.


    3:24 Why does WordPress have a reputation for being insecure.


    5:55 Many attacks are bots looking for weak credentials or plugins that have not been updated.


    8:16 Many people make a living just configuring Wordfence, Sucuri, and iThemes Security.


    9:12 Security plugins are a tool, not a 100% guarantee you won;t be hacked.


    14:35 Why are audit logs important? And are website owners ever surprised how much activity there is on their site?


    18:58 What advice would Robert give business owners when they go to build a website?


    23:51 You must pay attention to everything that touches your website, not just WordPress components


    29:21 Podcast Outros

     

    ===================

     

    Links mentioned during the show:

    Get Your Website on Google’s First Page – An Email Exchange with a SEO Specialist, or Not?

    https://www.wpwhitesecurity.com/wordpress-security/your-website-google-first-page-email-exchange-seo-specialist/

     

    ===================

     

    Subscribe to WP-Tonic on iTunes

    https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

     

    ===================

     

    WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress web development, business, and digital marketing.

    52 min

About WP-Tonic | WordPress | SaaS | Bootstrap SaaS | Startups

From the publisher's feed

WP-Tonic is a podcast for WordPress professionals, Bootstrap SaaS startup entrepreneurs, and anyone looking to build a business online.