WP-Tonic | WordPress | SaaS | Bootstrap SaaS | Startups

In this powerful interview, Gordan Orlic of Web Factory Ltd discusses becoming an elite plugin author on CodeCanyon and why he's leaving the platform, and moving everything to his own website.

Gordan pulls no punches as he talks about making the transition from getting traffic on a marketplace like CodeCanyon to setting up shop on your own.

Find Gordan at http://www.webfactoryltd.com/ 

Follow Gordan on Twitter on https://twitter.com/webfactoryltd

Episode 143 Table of Contents

0:00 Podcast Intros

2:30 How did Gordan get into web development and get into building WordPress plugins?

4:00 How did Gordan make the transition from client work to selling products?

7:46 Niching down helps you make more money in the long run.

10:19 Positioning and white-label plugins: ideas are garbage, having a working prototype is more valuable.

13:36 What are the pros and cons of being on Envato vs starting a plugin shop on your own?

22:22 Why is Envato still recovering and changing course from decisions they made five years ago?

31:24 The one thing on Envato that confuses nearly every customer.

35:02 CodeCanyon is a great place to start, but you can't build a brand there.

36:30 The reason Gordan is leaving Envato and is in the process of moving his plugins to his own website.

40:09 The thing you must accept if you piggyback on another successful platform or plugin.

42:01 Podcast outros

46:07 YouTube bonus content begins.

46:08 Gordan talks about his plugin Security Ninja, what it does and who it is for.

Security Ninja

https://wordpress.org/plugins/security-ninja/

56:40 What is making it tougher for plugin authors to make money on Envato right now?

1:02:45 The one thing that sucks about marketplaces. There are many upsides, but this one thing can hurt you long-term.

===================

Find additional content for this episode on the WP-Tonic website:

https://www.wp-tonic.com/podcast/143-gordan-orlic-wordpress-plugins/

===================

Follow WP-Tonic on iTunes and be sure to leave us a review!

itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

In this powerful interview, Gordan Orlic of Web Factory Ltd discusses becoming an elite plugin author on CodeCanyon and why he's leaving the platform, and moving everything to his own website.

Gordan pulls no punches as he talks about making the transition from getting traffic on a marketplace like CodeCanyon to setting up shop on your own.

Find Gordan at http://www.webfactoryltd.com/ 

Follow Gordan on Twitter on https://twitter.com/webfactoryltd

Episode 143 Table of Contents

0:00 Podcast Intros

2:30 How did Gordan get into web development and get into building WordPress plugins?

4:00 How did Gordan make the transition from client work to selling products?

7:46 Niching down helps you make more money in the long run.

10:19 Positioning and white-label plugins: ideas are garbage, having a working prototype is more valuable.

13:36 What are the pros and cons of being on Envato vs starting a plugin shop on your own?

22:22 Why is Envato still recovering and changing course from decisions they made five years ago?

31:24 The one thing on Envato that confuses nearly every customer.

35:02 CodeCanyon is a great place to start, but you can't build a brand there.

36:30 The reason Gordan is leaving Envato and is in the process of moving his plugins to his own website.

40:09 The thing you must accept if you piggyback on another successful platform or plugin.

42:01 Podcast outros

46:07 YouTube bonus content begins.

46:08 Gordan talks about his plugin Security Ninja, what it does and who it is for.

Security Ninja

https://wordpress.org/plugins/security-ninja/

56:40 What is making it tougher for plugin authors to make money on Envato right now?

1:02:45 The one thing that sucks about marketplaces. There are many upsides, but this one thing can hurt you long-term.

===================

Find additional content for this episode on the WP-Tonic website:

https://www.wp-tonic.com/podcast/143-gordan-orlic-wordpress-plugins/

===================

Follow WP-Tonic on iTunes and be sure to leave us a review!

itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

On this week's WP-Tonic round table, we give some insight on how to work with non-profit organizations. How is working with non-profits different than working with clients in the private sector?

Our round table of WordPress experts also discusses the best marketing practices for non-profits.

Our panel this week:

Morten Rand-Hendriksen of Lynda.com
Sallie Goetsch of WP Fangirl
Jonathan Denwood of WP-Tonic
John Lockeof Lockedown Design

Show Table of Contents:
0:00 Show Intros
2:02 WordPress Story #1: Does Jetpack slow down a WordPress website?
https://mattreport.com/jetpack-speed/

20:04 WordPress Story #2: How I Built It, Episode 12: Chris Lema and Beyond Good
https://howibuilt.it/episode-12-chris-lema-and-beyond-good/

31:54 Main Topic: Working With Non-Profits
32:02 What is different about working with non-profits vs working with regular businesses?
34:14 How does the non-profit managerial structure affect timelines and the decision making process?
36:44 Jonathan shares a link: How Nonprofits Get really Big from the Stanford Social Innovation Review
https://ssir.org/articles/entry/how_nonprofits_get_really_big

40:29 What unique challenges do non-profits have in establishing and achieving their marketing goals?
44:50 How do non-profits find their target segments? How do you define personas and develop a content strategy to reach those target personas?
48:38 What are some examples of non-profits that are doing a great job with marketing?
51:55 What are some things that non-profits need to focus on when it comes to their website and digital marketing?
56:20 Podcast outros
58:49 YouTube bonus content
58:55 More thoughts on marketing for non-profits
1:05:00 John's experience with non-profits
1:09:20 Quick advice on discounting and pro bono
1:09:50 Some non-profits may be in a better position to pay you than regular businesses.
1:11:27 Building up good will in the community by working with non-profits in your community.

==========================

LInks mentioned during the show:

If You Want Results, Think About How You Post and Share Content
http://tacticalsocialmedia.org/post-share-content-matters/

Ladies Learning To Code
http://ladieslearningcode.com/

Black Girls Code
http://www.blackgirlscode.com/

WEAVE, Inc.
http://www.weaveinc.org/

==========================

Find bonus content for this episode on the WP-Tonic website:
https://www.wp-tonic.com/podcast/142-working-with-non-profits-wordpress/

==========================

Subscribe to WP-Tonic on iTunes and leave us a review!
https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

On this week's WP-Tonic round table, we give some insight on how to work with non-profit organizations. How is working with non-profits different than working with clients in the private sector?

Our round table of WordPress experts also discusses the best marketing practices for non-profits.

Our panel this week:

Morten Rand-Hendriksen of Lynda.com
Sallie Goetsch of WP Fangirl
Jonathan Denwood of WP-Tonic
John Lockeof Lockedown Design

Show Table of Contents:
0:00 Show Intros
2:02 WordPress Story #1: Does Jetpack slow down a WordPress website?
https://mattreport.com/jetpack-speed/

20:04 WordPress Story #2: How I Built It, Episode 12: Chris Lema and Beyond Good
https://howibuilt.it/episode-12-chris-lema-and-beyond-good/

31:54 Main Topic: Working With Non-Profits
32:02 What is different about working with non-profits vs working with regular businesses?
34:14 How does the non-profit managerial structure affect timelines and the decision making process?
36:44 Jonathan shares a link: How Nonprofits Get really Big from the Stanford Social Innovation Review
https://ssir.org/articles/entry/how_nonprofits_get_really_big

40:29 What unique challenges do non-profits have in establishing and achieving their marketing goals?
44:50 How do non-profits find their target segments? How do you define personas and develop a content strategy to reach those target personas?
48:38 What are some examples of non-profits that are doing a great job with marketing?
51:55 What are some things that non-profits need to focus on when it comes to their website and digital marketing?
56:20 Podcast outros
58:49 YouTube bonus content
58:55 More thoughts on marketing for non-profits
1:05:00 John's experience with non-profits
1:09:20 Quick advice on discounting and pro bono
1:09:50 Some non-profits may be in a better position to pay you than regular businesses.
1:11:27 Building up good will in the community by working with non-profits in your community.

==========================

LInks mentioned during the show:

If You Want Results, Think About How You Post and Share Content
http://tacticalsocialmedia.org/post-share-content-matters/

Ladies Learning To Code
http://ladieslearningcode.com/

Black Girls Code
http://www.blackgirlscode.com/

WEAVE, Inc.
http://www.weaveinc.org/

==========================

Find bonus content for this episode on the WP-Tonic website:
https://www.wp-tonic.com/podcast/142-working-with-non-profits-wordpress/

==========================

Subscribe to WP-Tonic on iTunes and leave us a review!
https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

We talk with Heather about the life-cycle of web agencies, marketing, social media, and client relationships. How do Heather and her team find the right type of clients to work with?  Why is it important to develop strong ongoing relationships in your local business community?

I really enjoyed our chat with Heather. I could see why she has been so successful in driving her agency forward. The WordPress community has also been a key in building her business to its present level.

Episode 141 Table of Contents

0:00 Podcast Intros

1:33 Who does Blue Steele Solutions serve and how did they find their niche?

3:37 How does Blue Steele Solutions determine what clients are going to be a good fit?

5:40 What is the value in nurturing long-term relationships with clients?

8:55 Launching the website is not the end of the project, it's the beginning.

9:34 How did Blue Steele Solutions grow? What is Heather's origin story?

12:31 How does being active in the local community benefit Heather's business?

15:57 What are some of the mistakes that people make when outsourcing their marketing?

19:40 SEO is more than a one-time check-it-off-the-list thing. How do you select a reputable marketing or SEO company?

23:20 What goes into building a brand?

26:40 What can you do to attract great clients?

29:05 The realities of digital outreach, and benefits of having a realistic traffic plan.

34:52 How did Heather decide on WordPress as a platform? What are the benefits of WordPress over other web platforms?

38:24 How do you build up community? In person or digitally?

39:47 Podcast outros

===============

Find bonus content for this episode on the WP-Tonic website:

https://www.wp-tonic.com/podcast/141-heather-steele-blue-steele-solutions/

===================

Subscribe to WP-Tonic on iTunes

https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

===================

WP-Tonic is the publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

We talk with Heather about the life-cycle of web agencies, marketing, social media, and client relationships. How do Heather and her team find the right type of clients to work with?  Why is it important to develop strong ongoing relationships in your local business community?

I really enjoyed our chat with Heather. I could see why she has been so successful in driving her agency forward. The WordPress community has also been a key in building her business to its present level.

Episode 141 Table of Contents

0:00 Podcast Intros

1:33 Who does Blue Steele Solutions serve and how did they find their niche?

3:37 How does Blue Steele Solutions determine what clients are going to be a good fit?

5:40 What is the value in nurturing long-term relationships with clients?

8:55 Launching the website is not the end of the project, it's the beginning.

9:34 How did Blue Steele Solutions grow? What is Heather's origin story?

12:31 How does being active in the local community benefit Heather's business?

15:57 What are some of the mistakes that people make when outsourcing their marketing?

19:40 SEO is more than a one-time check-it-off-the-list thing. How do you select a reputable marketing or SEO company?

23:20 What goes into building a brand?

26:40 What can you do to attract great clients?

29:05 The realities of digital outreach, and benefits of having a realistic traffic plan.

34:52 How did Heather decide on WordPress as a platform? What are the benefits of WordPress over other web platforms?

38:24 How do you build up community? In person or digitally?

39:47 Podcast outros

===============

Find bonus content for this episode on the WP-Tonic website:

https://www.wp-tonic.com/podcast/141-heather-steele-blue-steele-solutions/

===================

Subscribe to WP-Tonic on iTunes

https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

===================

WP-Tonic is the publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

In this WP-Tonic round-table we look at WordPress and security with an excellent panel of WordPress community experts.

Our panel this week:
Brian Jackson from https://woorkup.com/ and https://kinsta.com/
Sallie Goetsch from https://wpfangirl.com/
Jackie D'Elia from https://jackiedelia.com/
Jonathan Denwood from https://www.wp-tonic.com/
John Locke from Lockedown SEO


Episode 140 Table of Contents
0:00 Podcast intros
1:50 WordPress Security – 18+ Steps to Lock Down Your Site
https://kinsta.com/blog/wordpress-security

3:12 Learning From Buggy WordPress Wp-login Malware
https://blog.sucuri.net/2016/10/learning-buggy-wordpress-wp-login-malware.html

6:49 Updating your WordPress plugins is one of the most important things you can do
10:22 Test all plugin and theme updates on a staging server

12:25 Surviving Electmageddon: Protecting against a wave of DNS outages
https://www.wordfence.com/blog/2016/11/surviving-electmageddon-protecting-wave-dns-outages/
(DDoS attacks and advantages of having a secondary DNS server)

17:34 Securing WordPress from the Start
https://ithemes.com/2016/11/02/securing-wordpress/

21:29 It's a good idea to have redundant backups for your website. You can't have enough of these.

24:35 What is one WordPress security tip that you should use right from the start?

25:48 Brian has a story about what sort of long-lasting damage to your SEO a single hack can produce.

27:20 Cleaning Up a Massive Negative SEO Attack with Web CEO
https://woorkup.com/cleaning-negative-seo-attack-web-ceo/

29:52 Changing the default login URL can prevent automated attacks. Also, always use strong passwords.

31:11 Always check your code for hidden backlinks to spam sites.

32: 35 We discuss Negative SEO.

33:12 Linkpocalypse Now – The Horror of Negative SEO
http://www.jacobking.com/negative-seo-truth

35:05 Limit the login attempts people can make to prevent a brute force attack. Consider two-factor authentication for logins.

36:16 Deactivate and delete any themes and plugins you're not using. Don't use the automatic WordPress install scripts that your hosting company provides.

38:24 Many people use weak passwords, and that's why they get hacked.

40:37 Install an audit log so you can see what activity is happening on your site. Clients will often be freaked out by how often the site is scanned.

42:25 Don't use themes where plugins are bundled into the theme (like on ThemeForest)
https://www.lockedownseo.com/why-we-shouldnt-bundle-wordpress-plugins-in-themes/

43:37 Do not allow everyone on your site to have Administrator access

46:15 XML-RPC: What is it? Why should you limit it's use? HOw do hackers use it?

49:03 Be careful about using public Wi-Fi to FTP or login to your site. Always use HTTPS on your site to encrypt your password when logging in publicly.

52:01 Use a virus scan on your own computer. Your computer can be an attack vector. Keep your version of PHP and MySQL versions up to date on your hosting account.

53:48 Shared hosting is not the most secure option for hosting. Large companies with internal IT departments are also prime for attack.

57:43 How much resistance is there with getting clients on board with WordPress security best practices?

1:02:44 If possible, use a service like LastPass to use strong passwords.
https://www.lastpass.com/

1:03:40 Podcast outros

===============

Other lInks mentioned during the show:

Maximum Overdrive (imdb)
http://www.imdb.com/title/tt0091499/

rmoov - The Backlink Removal Tool That Helps You Clean Up Bad Links
https://www.rmoov.com/index.php

Unmasked: What 10 million passwords reveal about the people who choose them
https://wpengine.com/unmasked/

WP White Security
https://www.wpwhitesecurity.com/

WP Security Audit Log
https://www.wpsecurityauditlog.com/

Co-Authors Plus
https://wordpress.org/plugins/co-authors-plus/

iThemes Security
https://ithemes.com/security/

Google Authenticator
https://wordpress.org/plugins/google-authenticator/

WP Clef
https://wordpress.org/plugins/wpclef/

KeyCDN
https://www.keycdn.com/


===============

For bonus content on this episode, go to the WP-Tonic website:
https://www.wp-tonic.com/podcast/140-best-practices-for-wordpress-security/

===================


Subscribe to WP-Tonic on iTunes
https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2


===================


WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

In this WP-Tonic round-table we look at WordPress and security with an excellent panel of WordPress community experts.

Our panel this week:
Brian Jackson from https://woorkup.com/ and https://kinsta.com/
Sallie Goetsch from https://wpfangirl.com/
Jackie D'Elia from https://jackiedelia.com/
Jonathan Denwood from https://www.wp-tonic.com/
John Locke from https://www.lockedowndesign.com/


Episode 140 Table of Contents
0:00 Podcast intros
1:50 WordPress Security – 18+ Steps to Lock Down Your Site
https://kinsta.com/blog/wordpress-security

3:12 Learning From Buggy WordPress Wp-login Malware
https://blog.sucuri.net/2016/10/learning-buggy-wordpress-wp-login-malware.html

6:49 Updating your WordPress plugins is one of the most important things you can do
10:22 Test all plugin and theme updates on a staging server

12:25 Surviving Electmageddon: Protecting against a wave of DNS outages
https://www.wordfence.com/blog/2016/11/surviving-electmageddon-protecting-wave-dns-outages/
(DDoS attacks and advantages of having a secondary DNS server)

17:34 Securing WordPress from the Start
https://ithemes.com/2016/11/02/securing-wordpress/

21:29 It's a good idea to have redundant backups for your website. You can't have enough of these.

24:35 What is one WordPress security tip that you should use right from the start?

25:48 Brian has a story about what sort of long-lasting damage to your SEO a single hack can produce.

27:20 Cleaning Up a Massive Negative SEO Attack with Web CEO
https://woorkup.com/cleaning-negative-seo-attack-web-ceo/

29:52 Changing the default login URL can prevent automated attacks. Also, always use strong passwords.

31:11 Always check your code for hidden backlinks to spam sites.

32: 35 We discuss Negative SEO.

33:12 Linkpocalypse Now – The Horror of Negative SEO
http://www.jacobking.com/negative-seo-truth

35:05 Limit the login attempts people can make to prevent a brute force attack. Consider two-factor authentication for logins.

36:16 Deactivate and delete any themes and plugins you're not using. Don't use the automatic WordPress install scripts that your hosting company provides.

38:24 Many people use weak passwords, and that's why they get hacked.

40:37 Install an audit log so you can see what activity is happening on your site. Clients will often be freaked out by how often the site is scanned.

42:25 Don't use themes where plugins are bundled into the theme (like on ThemeForest)
https://www.lockedowndesign.com/why-we-shouldnt-bundle-wordpress-plugins-in-themes/

43:37 Do not allow everyone on your site to have Administrator access

46:15 XML-RPC: What is it? Why should you limit it's use? HOw do hackers use it?

49:03 Be careful about using public Wi-Fi to FTP or login to your site. Always use HTTPS on your site to encrypt your password when logging in publicly.

52:01 Use a virus scan on your own computer. Your computer can be an attack vector. Keep your version of PHP and MySQL versions up to date on your hosting account.

53:48 Shared hosting is not the most secure option for hosting. Large companies with internal IT departments are also prime for attack.

57:43 How much resistance is there with getting clients on board with WordPress security best practices?

1:02:44 If possible, use a service like LastPass to use strong passwords.
https://www.lastpass.com/

1:03:40 Podcast outros

===============

Other lInks mentioned during the show:

Maximum Overdrive (imdb)
http://www.imdb.com/title/tt0091499/

rmoov - The Backlink Removal Tool That Helps You Clean Up Bad Links
https://www.rmoov.com/index.php

Unmasked: What 10 million passwords reveal about the people who choose them
https://wpengine.com/unmasked/

WP White Security
https://www.wpwhitesecurity.com/

WP Security Audit Log
https://www.wpsecurityauditlog.com/

Co-Authors Plus
https://wordpress.org/plugins/co-authors-plus/

iThemes Security
https://ithemes.com/security/

Google Authenticator
https://wordpress.org/plugins/google-authenticator/

WP Clef
https://wordpress.org/plugins/wpclef/

KeyCDN
https://www.keycdn.com/


===============

For bonus content on this episode, go to the WP-Tonic website:
https://www.wp-tonic.com/podcast/140-best-practices-for-wordpress-security/

===================


Subscribe to WP-Tonic on iTunes
https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2


===================


WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress development, business, and online marketing.

In episode 139, we interview Robert Abela, founder of WP Security Audit Log, a leading WordPress auditing plugin. Robert's blog at WP White Security is a great resource for learning more about WordPress security best practices. Robert focuses on explaining website security in a way that non-technical people can understand.

Resources:

WP White Security
https://www.wpwhitesecurity.com/

WP Security Audit (WordPress plugin)
https://www.wpsecurityauditlog.com/

WP Security Bloggers (Aggregate feed)
http://www.wpsecuritybloggers.com/


Episode 139 Table of Contents

0:00 Intros /What Robert does.

3:24 Why does WordPress have a reputation for being insecure.

5:55 Many attacks are bots looking for weak credentials or plugins that have not been updated.

8:16 Many people make a living just configuring Wordfence, Sucuri, and iThemes Security.

9:12 Security plugins are a tool, not a 100% guarantee you won;t be hacked.

14:35 Why are audit logs important? And are website owners ever surprised how much activity there is on their site?

18:58 What advice would Robert give business owners when they go to build a website?

23:51 You must pay attention to everything that touches your website, not just WordPress components

29:21 Podcast Outros

===================

Links mentioned during the show:

Get Your Website on Google’s First Page – An Email Exchange with a SEO Specialist, or Not?

https://www.wpwhitesecurity.com/wordpress-security/your-website-google-first-page-email-exchange-seo-specialist/

===================

Subscribe to WP-Tonic on iTunes

https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

===================

WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress web development, business, and digital marketing.

In episode 139, we interview Robert Abela, founder of WP Security Audit Log, a leading WordPress auditing plugin. Robert's blog at WP White Security is a great resource for learning more about WordPress security best practices. Robert focuses on explaining website security in a way that non-technical people can understand.

Resources:

WP White Security
https://www.wpwhitesecurity.com/

WP Security Audit (WordPress plugin)
https://www.wpsecurityauditlog.com/

WP Security Bloggers (Aggregate feed)
http://www.wpsecuritybloggers.com/


Episode 139 Table of Contents

0:00 Intros /What Robert does.

3:24 Why does WordPress have a reputation for being insecure.

5:55 Many attacks are bots looking for weak credentials or plugins that have not been updated.

8:16 Many people make a living just configuring Wordfence, Sucuri, and iThemes Security.

9:12 Security plugins are a tool, not a 100% guarantee you won;t be hacked.

14:35 Why are audit logs important? And are website owners ever surprised how much activity there is on their site?

18:58 What advice would Robert give business owners when they go to build a website?

23:51 You must pay attention to everything that touches your website, not just WordPress components

29:21 Podcast Outros

===================

Links mentioned during the show:

Get Your Website on Google’s First Page – An Email Exchange with a SEO Specialist, or Not?

https://www.wpwhitesecurity.com/wordpress-security/your-website-google-first-page-email-exchange-seo-specialist/

===================

Subscribe to WP-Tonic on iTunes

https://itunes.apple.com/us/podcast/wp-tonic-wordpress-podcast/id893083124?mt=2

===================

WP-Tonic is a both a WordPress maintenance and support service, and publisher of a twice weekly WordPress podcast where we talk with some of the most successful people in WordPress web development, business, and digital marketing.