Affichage des articles dont le libellé est Basics. Afficher tous les articles
Affichage des articles dont le libellé est Basics. Afficher tous les articles

samedi 12 novembre 2016

Basics of Inspect Element: Customizing WordPress for DIY Users



Have you ever wanted to temporarily edit a webpage to see how it would look with specific colors, fonts, styling, etc. It’s possible with a tool that already exists in your browser called Inspect Element. This is a dream come true for all DIY users when they find out about it. In this article, we will show you the basics of inspect element and how to use it with your WordPress site.


WordPress beginner's guide to using Inspect tool in Google Chrome


What is Inspect Element or Developer Tools?


Modern web browsers like Google Chrome and Mozilla Firefox has built-in tools which allow web developers to debug errors. These tools show the HTML, CSS, and JavaScript code for a page and how the browser executes the code.


Using Inspect Element tool, you can edit HTML, CSS, or JavaSCript code for any webpage and see your changes live (only on your computer).


For a DIY website owner, these tools can help you preview how a site design would look without actually making the changes for everyone.


For writers, these tools are awesome because you can easily change personal identifying information when taking your screenshots eliminating the need to blur out items altogether.


For support agents, it’s a great way to identify the error that could be causing your galleries to not load or your sliders to not work properly.


We’re just scratching the surface of use-cases. Inspect element is really powerful.


In this article, we will be focusing on Inspect Element in Google Chrome because that’s our browser of choice. Firefox has its own developer tools which can also be invoked by selecting inspect element from browser menu.


Ready? Let’s get started.


Video Tutorial



If you don’t like the video or need more instructions, then continue reading.


Launching Inspect Element and Locating The Code


You can launch inspect element tool by pressing CTRL + Shift + I keys on your keyboard. Alternately you can click anywhere on a web page and select inspect element from browser menu.


Inspect menu


Your browser window will split into two, and the lower window will show the web page’s source code.


The developer tool window is further divided into two windows. On your left, you will see the HTML code for the page. On the right-hand pane, you will see the CSS rules.


HTML and CSS Panes in Inspect window


As you move your mouse over the HTML source you will see the affected area highlighted on the web page. You will also notice CSS rules change to show the CSS for the element you are viewing.


Editing a particular HTML element


You can also take the mouse pointer to an element on the web page, right click and select inspect element. The element you pointed at will be highlighted in the source code.


Editing and Debugging Code in Inspect Element


Both the HTML and CSS in the inspect element window are editable. You can double click anywhere in the HTML source code and edit the code as you like.


Editing HTML code in inspect element tool


You can also double click and edit any attributes and styles in the CSS pane. To add a custom style rule click on the + icon at the top of CSS pane.


Editing CSS in the inspect element tool


As you make changes to the CSS or HTML those changes will be reflected in the browser instantly.


Live CSS changes in the browser screen


Note, that any changes you make here are not saved anywhere. Inspect element is a debugging tool, and it does not write your changes back to the files on your server. This means that if you refresh the page, all your changes will be gone.


To actually make the changes, you will have to edit your WordPress theme’s stylesheet or relevant template to add the changes you want to save.


Before you start editing your existing WordPress theme using Inspect Element tool, make sure you that you save all your changes by creating a child theme.


Easily Find Errors On Your Site


Inspect element has an area called Console which shows all the errors that exist on your website. When trying to debug an error or requesting support from plugin authors, it’s always helpful to look here to see what the errors are.


Browser Console Error


For example, if you were an OptinMonster customer wondering why your optin is not loading, then you can easily find the problem “your page slug does not match”.


If your sharebar wasn’t working properly, then you can see that there’s a JavaScript error.


Tools like the Inspect Element Console and SupportAlly help you get better customer support because the technical support team love customers who take initiative in providing detailed feedback of the issue.


We hope this article helped you learn the basics of inspect element and how to use it with your WordPres site. You may also want to take a look at the default WordPress generated CSS cheat sheet to speed up your theme development skills.


If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Google+.


The post Basics of Inspect Element: Customizing WordPress for DIY Users appeared first on WPBeginner.







The Basics of Domain Privacy



alt="The Basics of Domain Privacy" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2013/07/shopping-choices-500x214_c.jpg" />

Should You Register Your Domain Names Privately?

Ready, set, blog! Wait! Have you registered your domain name yet? Of course, you have to register that domain name but before you do, there is one question you have to deal with: to private or to go public? As required by the Internet Corporation for Assigned Names and Numbers (href="http://www.icann.org/" target="_blank">ICANN), the domain owners must make their e-mail address, mailing address and phone numbers available on WHOIS directories.

Security Concerns

class="alignright" alt="Web Domain Privacy" src="http://www.webhostingsecretrevealed.net/images/2010/0322-1.jpg" width="342" height="215" />

Yes, you read it right: all those data that are supposed to be private have to be listed on WHOIS Web sites. This way, if someone wants to know who owns a Web site, all they to do is href="http://www.domaintools.com/" target="_blank">run a quick WHOIS search, type the domain name and voila, they have access to the website registration details.

This is one reason why you should register your domain name privately. Imagine what could happen if spammers, identity thieves, direct marketers and even stalkers get hold of your telephone number and mailing address. The least that could happen is you get an influx of marketing letters in your mailbox; the worst that could happen is someone stealing your identity. And if you had someone obsessed with your Web site or you get someone peeved with your Web site content, you may have someone stalking you from the virtual world to the real world.

Scary, you might say.

But these things do happen and can happen to anyone, including you and me. In the virtual world, we all are vulnerable to becoming a prey to predators lurking on the internet. So, if you do not want your registration details being put up on those WHOIS registries, you might as well opt to register your domain name privately.

Opt for private registration

So, have you made up your mind yet? I say you opt for privacy. And if you still do not know how to do it, there are many domain servers out there that offer you such option. Although it would mean paying an extra, about or so, for a year, I think it is the best way to keep your details secured. Think of the cost that you have to shoulder should your domain registration details fall into the wrong hands. Check with your domain registrar.

Keeping your details secure

id="floatright">

If you opt register your domain name in private, your details will be blocked by your domain registrar. When people check on your domain registration on any WHOIS registry, they will not see your name, e-mail address, home address, and phone number. They will see the name of your domain host as the registrar and not your name. Is that a good idea or not? You get to keep your private details for an additional but affordable cost.

Keep in mind that there are href="http://www.webhostingsecretrevealed.com/web-domain/country-code-for-top-level-domains/">domain extensions that would let you keep your details private and there are some domain extensions that would not allow you. If you choose .us as your domain extension that you will not have the option to keep your registration details private. Why is this so? This is because the href="http://www.ntia.doc.gov/" target="_blank">National Telecommunications and Information Administration (NTIA) requires all domain names with such .us extension must keep their registration details available to public. On the other hand, domain names with .ca extensions are assured that their registration details are keep in private as the Canadian Internet Registration Authority has stopped posting individual registrar’s details. Domain extensions like .co.uk, .me.uk, and .org.uk give you the option to keep your details private. And there are other companies online that will give you the option to register your domain name in private for an additional charge.

Picking up the right private registrar

Beware though of some domain registrars or companies offering domain registration privacy. Do not be fooled by what you read on their advertisement pages or on what these domain registrars are promising. Make a lot of researches before you decide on which company you will register your domain names. There are many forums online (my fav: href="http://www.webhostingtalk.com/">Web Hosting Talk and href="http://www.webmasterworld.com">Webmaster World) that will give you an idea whether on company can be trusted or is able to deliver their promises. Also, check out my href="http://www.webhostingsecretrevealed.net/hosting-reviews/">hosting reviews here – some of the hosting providers (href="http://www.webhostingsecretrevealed.net/hosting-review/webhostinghub/">WebHostingHub and href="http://www.webhostingsecretrevealed.net/hosting-review/inmotion-hosting/">InMotion Hosting, for example) do provide such registration services.

There are also news article online chronicling the experiences of individuals who have opted to register their domain name privately with domain registrars and ended up disappointed. The key in domain name registration privacy is to do it with a reputable company that has a good reputation in keeping registrar’s details private. Some companies will promise you everything but will give in to pressure. One domain name registration company allegedly gave the private details of one of its clients after receiving a phone call requesting for it. This and other related incidence should be avoided and prevented from happening. In the end, if you do opt for private registration, make sure that your blog will not earn annoy or displease people who would do everything and anything possible to track you down.

Related Readings

Some related links before I end this article: For newbies, you might also want to check out my articles on the domain name topic, including title="What is a domain name?" href="http://www.webhostingsecretrevealed.net/blog/featured-articles/all-you-need-to-know-about-domain-names/">What Is A Domain Name, title="Permanent link to What is the difference between a domain and web hosting?" href="http://www.webhostingsecretrevealed.net/blog/web-hosting-guides/what-is-the-difference-between-a-domain-and-web-hosting/">Difference Between Web Hosting And Domain Name, as well as title="Permanent Link to Tips & Tools On Selecting The Right Domain Name" href="http://www.webhostingsecretrevealed.net/blog/web-hosting-guides/domain-tips/" rel="bookmark">My Tips On How To Select The Right Domain Name. Also, despite spammers and hackers, it is equally important href="http://www.webhostingsecretrevealed.net/blog/featured-articles/15-tips-on-how-not-to-get-screwed-by-your-web-host/">To Protect Yourself From A Bad Hosting Company.

Have fun reading! ;)


Page 28 – Web Hosting Secret Revealed




The Basics Of Green Web Hosting



alt="The Basics Of Green Web Hosting" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2013/07/greenhosting-500x260_c.jpg" />

The Background: Why Green In Hosting Industry?

Recently even industries in highly commercialized countries have held meetings regarding the impact of Global Warming. The harmful gases produced from industries in clouds of dark black gases and ashes have caused a lot of ecological disasters. Therefore, industries have been asked to take measures in order to reduce the destruction caused by heavy industrialization world wide. Similarly some web hosting companies have decided to play their part in preserving the ecosystem. When they join this cause – they are called “Green Web Hosts”.

The main concept behind Green Web Hosting is using renewable resources for energy. Previously fuels and coal were used to produce electricity (the so-call ‘Dirty Power) which industries use at a very high rate. The normal electricity consumption by industries causes production of a lot of harmful fuel gases which go into the surrounding environment. These harmful gases affect all life forms and destroy the ecological balance.

An increase in air pollution has caused acid rains, increased air borne diseases and even extinction of some animal species in various countries. As an attempt to reduce these negative impacts on our natural environments (and also, to use this as a marketing strategy), web hosts have decided to use other energy sources.

These Green web hosting companies  are as good as the regular web hosting services.

In fact, half of the web hosting companies that I reviewed here are using green energy: href="http://www.webhostingsecretrevealed.net/hosting-review/ipage/">iPage, href="http://www.webhostingsecretrevealed.net/hosting-review/hostgator/">Hostgator, href="http://www.webhostingsecretrevealed.net/hosting-review/fatcow/">FatCow, and href="http://www.webhostingsecretrevealed.net/hosting-review/greengeeks-hosting/">GreenGeeks. All these Green Web Hosts offer all the standard services to their customers without any hitches. There are no limitations and people using Green web hosting services have full access to their accounts all the time. They can easily make use of the POP accounts, Sub-domains, MySQL, and even use extra FTP accounts. There are no limitations. Green web hosting have faster operating systems and their servers are driven by FreeBSD, making them more stable and reliable.

One may wonder if there will be more server-down scenarios as compared to that of the normal web hosting services. It is in fact better than what most normal web hosting services offer. This is because they are less prone to over loads and fluctuations being independent from the main electricity providers. Even if they have power outages they can quickly revert to reserves.  So they are targeted toward offering 99.9% uptime service guarantees. Hostgator, for example, is doing href="http://www.webhostingsecretrevealed.net/blog/hosting-updates-news/updates-hostgator-uptime-review/">remarkably well in term of server uptime.

How Hosting Companies Go Green: The Basic Idea

class="border" alt="Green Hosting Guides" src="http://www.webhostingsecretrevealed.net/images/2011/0311-2.jpg" width="750" />

Green Web Hosts have started using alternative energy sources such as, solar panels, bio-gas, wind electricity and hydro-electricity. The benefits of these forms of energy has been a marked reduction in air pollution and improved climate. This is because using these alternative sources of energy has reduced carbon emission.

Web hosting requires non stop working of servers to provide good and reliable internet services to their clients. Therefore constant electricity supply is non-negotiable, and it is important to have a good source of energy. This is why web hosting companies interested in going green have started installing solar panels to support their servers using solar energy. Wind mills too have become important for those who choose to use the wind as a source of carbon free energy. The solar energy and wind energy sources are almost 90% recycled, however hydro-electricity is not as efficient as the first two. Nonetheless it has also been adopted my most web hosting companies in an attempt to preserve the environment.

These companies need to install these machineries. In most countries the government has started providing solar panels for interested companies and industries. All they need to do is inform the appropriate authorities of their interest in going green.

The Real Deal: How Hosting Companies Actually Go Green

class="alignright" alt="Hostgator Green Hosting Certs" src="http://www.webhostingsecretrevealed.net/images/2009/0611-2.jpg" width="250" height="173" />
BUT WAIT! Web hosting companies installing solar panel and wind mills? This does not sound financial-wise for href="http://www.webhostingsecretrevealed.net/hosting-review/webhostinghub/">a web host that sells green hosting at .99/mo.

Okay, this proves that you are actually reading my words. :) Yes, in fact it is (almost) impossible for a hosting companies to build wind mills and solar panels (think about the extra maintenance cost and the extra technical expertise!).

So how, actually, Green Web Hosting go green?

Short answer: Energy Credits Certificate. These are best explained as non-tangible commodities which serve as proof that solar panels or solar energy is being used. A renewing of energy credits certificate is bought for every 1megawatt per hour of energy generated and returned to the power grid. This means that any company can generate 100% clean electricity without the hassles to build wind mills and solar panel (so to say).

My choice of Best Green Hosting, href="http://www.webhostingsecretrevealed.net/hosting-review/greengeeks-hosting/">GreenGeeks for example, replace, with wind power, 3 times the amount of energy used by their servers. So if their servers pull 1X of power from the grid; the company purchase enough wind energy credits to put back into the grid 3X of power having been produced by wind power. For reference, figure on your right is the certificate of purchase of 2.3 million MW of clean, renewable energy of GreenGeeks.

That’s how green web hosting “go green”.

A Few Other Ways To Go Green

In case you wonder, yes, there are still other ways to go green but I don’t see it being used by any hosting company. One of the options that I read online is the Cold aisle containment. This option helps companies minimize the carbon footprints. Leakage of cold air into the warm air is prevented. This works by reducing the consumption of power by improving the cooling system. Similarly, the chloride power protection system is also as a good source of uninterrupted power supply. This is a chemical mixture which conserved power up to 100% and recycling the resources. Thereby it is very profitable and economical.

Green – A Factor In Web Host Shopping?

id="floatright">class="alignright" alt="Green Hosting - A Must?" src="http://www.webhostingsecretrevealed.net/images/2011/0311-1.jpg" width="280" height="353" />

The idea of Green Web Hosting  is aimed at convincing internet users that there are no negative effects on their natural environment. Yes, theoretically, it does reduce your carbon footprint and perhaps make you feel better, that you have done some good for the earth. But in reality, I believe (read: personal opinions with no fact support) the impact (of using a Green Web Host) is rather small. Hey, these hosting companies actually did not reduce ‘dirty’ energy consumption directly. These hosting companies are just purchasing Energy Credits Certificate and offsetting their power consumption. It feels like the same argument of href="http://www.ibpa-online.org/membersarea/shownews.aspx?id=2984">Is E-Reading Really Greener?, don’t you think?

Personally, I do not take in the ‘green factor’ when I am searching for a web host. Rather, I am more concern with the server uptime, response rate, prices, and so on. If the web host is green, great; if it is not, I’ll live with it. There are tons of better ways to make our earth a better place and I would say going green on web hosting is not the most effective ways.

But then again, that’s me.

Should you factor ‘Green’ in the checklist when href="http://www.webhostingsecretrevealed.net/choose-the-right-web-hosting/">shopping for a web host? Well, that’s up to you! ;)


Page 27 – Web Hosting Secret Revealed




The Basics Of .htaccess



alt="The Basics Of .htaccess" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2015/04/default-image-500x308_c.jpg" />

Understanding a Server’s .htaccess File is a Key Component of Web Design and Development

Most amateur web hosting clients and new web developers assume that the most important part of any server setup is the installed software. They feverishly install their ASP-based or PHP-based application, in hopes of creating advanced content that is controlled by popular software and extensive database cells and tables. But amid this flurry of activity, almost every developer initially ignores one of the most important and powerful files on the server itself. That file is known as the ".htaccess" file, and it controls everything form error messages to password-protected pages, permalink structure to blocked users who cannot see the site’s content.

The ".htaccess" file resides in the server’s root public directory by default. On Linux servers, that directory is almost always called "public_html." For subfolders which need to benefit from the power of this file, href="http://wildjokerdesign.net/faq/how-do-i-enable-htaccess-files-secondary-domain" target="_blank">a secondary ".htaccess" file can be placed within every subfolder and other directory on the server itself. Every file or folder within a directory with an ".htaccess" file inherits that file’s permissions and guidelines unless overridden by a separately-coded version of the file. If it sounds complex, that’s because of is a moderately advanced technique of controlling server behavior. It is not, however, impossible to learn. And once a developer or novice web hosting customers learns how to control their server using this file, they’ll find it impossible to return to the days when an ".htaccess" file was a nuisance that was hardly understood, let alone employed.

src="http://www.webhostingsecretrevealed.com/images/2012/0608-2.jpg" title=".htaccess Guide" class="border" />

Password Protecting Directories is a Snap with the .htaccess File

Web hosting server security is something that almost every customer looks into before they commit to any specific hosting company or server technology. For the most part, Windows and Linux servers are equally secure, keeping information away form those who should not have it. But that is only true as far as defending against hackers and malicious web scripts. When it comes to password protecting specific files or directories, all of the work must be done by the .htaccess file separate from either server’s technologies or security features.

The .htaccess file has its own unique style of protecting these directories, as laid out by its simple, line-by-line programming language and techniques. In this case, a user simply defines the directory to be protected and then sets the required parameters for accessing that directory in the file itself. That password can apply to just one file, to an entire directory, or to the entire server itself when accessed via a typical web browser. The simple, single-line setup of a file or directory password looks like the example below when it as been completely filled out and initiated.

AuthUserFile /public_html/secure/files/.htpasswd
AuthGroupFile /dev/null
AuthName EnterPassword
AuthType Basic
require user secureUser

These lines of code are paired with a new file called ".htpasswd." This file resides in the directory which is being secured and it contains the username and password which will grant users access to the protected information. In the example above, it has been specified that only the user "secureUser" can be given access to the directory, and they must enter the required password as determined by the "AuthName EnterPassword" line of code that lies just a bit above the user definition.

src="http://www.webhostingsecretrevealed.com/images/2012/0608-3.jpg" title=".htaccess Guide" class="border" />

In the ".htpasswd" file that will be created in the protected directory, users only need to add a single line of code. The format is simple; every user and password combination is separated using colons. This means they’ll simply add "user:password" to the file. In this case, it would be "secureUser:securedirectorypassword1" as an example. This will define all possible access codes and usernames. Site administrators can certainly include multiple users and passwords within this list, so long as the remove the "require user secureUser" distinction form the ".htpasswd" file. Alternatively, they could define multiple passwords for the same username while keeping that line of code, ensuring that access could be revoked from certain individuals or groups at any time if the right password is deleted from the ".htpasswd" file.

To learn more on this issue, read: href="http://support.godaddy.com/help/article/1641">Using .htpasswd with Your Linux Shared Hosting Account.

Defining Easy-to-Remember Links to Website Content and Static Pages

One of the most widespread current uses of the prolific ".htaccess" file is to use the file’s parameters to define semantically-easy "href="http://codex.wordpress.org/Using_Permalinks" target="_blank">permalinks" for site content and static pages when using content management software like WordPress or MovableType. This not only helps users remember and reload site content, but also improves a website’s search ranking on major search engines. Those search engines use semantically-friendly URLs to determine what content is on any given page and whether or not the content matches the URL. A title-URL match indicates more authority and a higher likelihood that a user will find the information they’re looking for. Appropriate, the website then ranks higher on major search engines when using permalink structure.

For those users who have installed WordPress to their site’s servers, the following line is added during the installation process almost as a requirement — especially with more recent versions of the software from version 3.0 and newer. The line of code looks exactly like the example below and is standard for more than 60 million self-hosted WordPress customers worldwide.

RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

Again, it’s easy to see the line-by-line structure of ".htaccess" file programming instructions. These few simple lines of code tell the server to use the WordPress "index.php" file as the base for all URLs which originate within the content manage software solution itself. Using that file as a base, and rewriting the entry titles as permalinks, the URL rewrite essentially combines database queries with file permissions to create "friendly" URLs. Modifying an ".htaccess" file to rewrite its URLs is currently the leading, if not only, way of constructing friendlier URLs from PHP and ASP-based content management software solutions.

Guiding Search Engines to Recently Relocated Content Locally or Remotely

While permalinks were designed to eliminate the process of randomly-relocated content and intensive redirects, they haven’t completely eliminated the problem. Indeed, permalinks can be managed within any content management solution’s control panel; the moment a user changes the permalink structure, everything within the purview of the CMS software can go missing and throw errors to search engines and users alike. This can be eliminated as problem with a very simple line of ".htaccess" code which redirects customers and throws an "invisible" error to major search engines. The code is this:

Redirect 301 /archive/ /past-entries/

This redirect places the old and new URLs side-by-side with the old URL listed first. It instructs the server to throw a 301 redirect error at browsers and search engine "spiders" alike, but this error is never seen by the end user. Instead, a 301 redirection is an invisible error that occurs behind the scenes. While the user is automatically taken to the new path and new content, the browser and search engine understand that "301" means "permanently moved." Both the browser and any search engines which experience this error will immediately update their records to reflect the new URL and they’ll remove the old one immediately.

This is a great way to move to a new domain name without losing customers, as well. The ".htaccess" file on the old server can be used to actually point to content at a completely new domain name with just a little change to the line of code that was presented above. Instead of pointing to two relative paths on the same server, the 301 redirection code in this case would look like the following:

Redirect 301 / http://www.your-domain-name.com

This instructs the server to send anything in the root directory, or any subfolders, to the new domain name at the exact same path as it was on the old server. All that changes is the actual domain name itself. Again, because it uses the 301 error code, search engines will automatically update their records to reflect the new domain name. This is not only a great tool for usability, but it also prevents a website from losing its search engine rankings. Instead of starting over, search engines will understand that this is the same website at a new location. They’ll maintain their old perception and rankings, and the administrator will benefit greatly from employing this unique method of moving between domains.

From Invisible Errors and Redirections to Actual Error Pages for Site Visitors

id="floatright">src="http://www.webhostingsecretrevealed.com/images/2012/0608-4.jpg" title=".htaccess Guide" />

It’s certainly true that the ".htaccess" file specializes in redirecting users to new content while invisibly updating search engines, but this unique file can also be used to display specific error pages when content is missing, cannot be displayed, or is coded in such a way that errors prevent the page from loading at all. This is done by specifying a specific page for display based on the server’s three-digit error code. These codes are integrated into services like Apache and IIS, so there’s no real need for configuration beyond the ".htaccess" file. The example below tackles the world’s most common error page, known as the "404 error" for missing pages and directories.

ErrorDocument 404 /404.html

Whenever a user stumbles across a link that no longer exists, or a subfolder which has been deleted, they’ll automatically be redirected by the ".htaccess" file to an informative and helpful 404 error page that can be customized and specifically designed by the website’s administrator. This is a great way of bringing them back into the fold rather than sending them away with a simple and nondescript error page that offers no alternatives to the lost page.

The same process can be completed for virtually every type of server-based page-load error in existence. This includes 401, 403, and 500 server errors in addition to the typical "page not found" mishap that most users encounter. Be sure to research the meaning of each error code and present a custom-written message and site design for each error that will bring users back to existing site content with ease. It’s the best way to ensure that even a site’s navigational or logical failures are turned into opportunities and successes.

When All Else Fails, Ban Users with a Few Simple Lines of Code

For the most part, the ".htaccess" file is used for things which tend to work in the average user’s favor. This includes the error pages, custom redirection methods, and "friendly" permalink URLs, among other great features. But this file can also be used to make sure that some users are simply denied access to the website entirely. It’s a great way to ban those who "spam" site comments, frequently cause disruption or arguments among fellow readers, or simply can’t handle their access privileges in a responsible way.

To maintain a site’s integrity and make sure that other readers don’t migrate to other websites out of sheer frustration with just a few bad apples, the ".htaccess" file allows for banning specific IP addresses or entire ranges (or "blocks") of IP addresses. This means that entire countries can be banned, entire ISPs can be banned, or entire states, communities, or organizations can be forced to go elsewhere to read their daily content and cause trouble. When employed in the site’s ".htaccess" file, the process of banning a user looks like this:

allow from all
deny from 158.23.144.12
deny from 24.100

In the example above, the site is instructed to allow visitors from all IP addresses, except those who visit from the IP address 158.23.144.12. In addition, all visitors in the 24.100 range of IP addresses are denied access to a site. This range likely bans an entire internet service provider’s customer base from reading a site’s content. Rest assured, however, that this is sometimes necessary in dire cases.

Embrace the .htaccess File and Wield Some Power Over Site Functions

The great thing about the .htaccess file is that it allows server administrators to control settings that are otherwise considered very advanced or those which require "root" access to the server. This file is a great way to manage access, errors, redirections, and even URL structure and semantic sense. Mastering it is the key to protecting and empowering a site’s new and returning visitors.


Page 23 – Web Hosting Secret Revealed




WordPress How-To: The Basics Of WP Plugins Development



alt="WordPress How-To: The Basics Of WP Plugins Development" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2013/06/wordpress-500x133_c.jpg" />

We will be working on a series of articles focus on “title="WordPress Guides" href="http://www.webhostingsecretrevealed.net/category/blog/wordpress-blog/">how to do X with WordPress“. These articles will be a little lengthy and they are mainly for experienced webmasters and developers; in case you are new to WordPress, please check out my title="WordPress beginner guides" href="http://www.webhostingsecretrevealed.net/blog/blogging-tips/the-complete-guide-to-your-first-wordpress-site/">Guide To Your First WordPress Blog.

And now, some basic introduction.

Expanding on WordPress Features By Developing a New Plugin

class="border" alt="WordPress Homepage" src="http://www.webhostingsecretrevealed.net/images/2012/0410-7.jpg" width="750" />

WordPress is the most popular content management platform in the world, with more than 60 million users of its self-hosted PHP installation package and millions more using its web-based, remotely-hosted WordPress.com service. This is not a coincidence or mistake. WordPress is, quite simply, the most fully-featured, affordable (it’s free!), easily-usable content management application in the world. However, even this titan of content management isn’t absolutely perfect, and many users eventually find that the software lacks one or two essential functions that they simply cannot live without.

Enter href="http://wordpress.org/extend/plugins/" target="_blank">WordPress plugins.

These unsatisfied users will then go on a quest, a large search, in an effort to find the right plugin to get the job done. Some people find that needed plugin, BUT many others simply don’t find that they’re looking for.

Some WordPress users might be content to simply give up the fight and resign themselves to a life where one essential feature is missing from their website. But a sizable group of these users is simply not willing to throw in the towel, and they’ll pursue the process of designing their own custom-made plugin to get the job done. It might sound complicated and intimidating, and some parts of it might be. Certainly, href="http://php.net/manual/en/intro-whatis.php" target="_blank">solid knowledge of PHhref="http://php.net/manual/en/intro-whatis.php" target="_blank">P will be required for more advanced plugins that add real features to the WordPress functionality. But a plugin is a relatively easy thing to write, especially for basic functions that are standard throughout WordPress and simply need to be “reworked” in order to do the job better and present it in a more pleasing way.

Users who won’t settle for second-best, and are thinking about creating their own plugin, need only follow the simple steps below to put their WordPress installation on a path toward greater functionality and compatibility with their big ideas and grand plans for Internet domination.

Step 1: Create a New File within the Plugin Directory and Give it a Purpose

class="border" alt="WP Plugins" src="http://www.webhostingsecretrevealed.net/images/2012/0410-5.jpg" width="750" />

The first step to creating a plugin is to simply create a new PHP plugin file within the existing WordPress plugins directory.

By now, most users should know where to locate that directory as they’ve likely uploaded a handful of plugins to enhance their WordPress installations’ functionality already. However, for those who are really approaching this process as a complete and total novice, the directory containing all pug in files is found at the following location for every version and iteration of the WordPress software:

/public_html/wp-content/plugins/

Navigate to that directory and create a new (blank, at this point) file named “my-custom-plugin.php.” This is the file which will contain all o our work from start to finish, and we’ll give it an obvious name sot hat it doesn’t accidentally get deleted or prematurely activated during the development process. Once this file has been created and uploaded to the server, use an FTP client to directly edit this file (using a built-in text editor) while it is still hosted on the server. This is the best way to edit remote files, as it makes saving and uploading essentially automatic, and definitely easier than managing multiple versions of the same file stored in different locations.

The plugin will now be named, described, and given a “byline.” This is the same type of information that is placed at the top of a theme’s “style.css” stylesheet file, and theme developers will feel right at home by filling out the information below. Place this information into the top of the plugin file before any other code. Even the opening PHP tag should not be placed before these commented lines. If these lines are placed incorrectly, or are omitted entirely, the plugin itself will not appear within the WordPress Dashboard. That means it cannot be activated, used, tested, or debugged, and that’s no good. Here’s what needs to be filled out before opening the file and proceeding to define a function:

/*
Plugin Name: A Custom Plugin Used to Learn the Ways of WordPress
Plugin URI: http://www.your-website-here.com
Description: This plugin is being used to demonstrate how PHP code, WordPress variables, XHTML, CSS, and other information, is placed into a standard plugin PHP file to add new functionality to a standard WordPress installation.
Author: Your Name Here
Version: 1.0
Author URI: http://www.your-website-here.com
*/

With that information having been completely filled in, the plugin will now be spotted by the WordPress Dashboard and its information will be properly displayed alongside other plugins within the plugin activation / deletion administration panel. The plugin has now been given a filename, a friendly name, and a purpose. All it’s missing at this point are some functions. That’s where step two comes in.

class="border" alt="WP Plugins" src="http://www.webhostingsecretrevealed.net/images/2012/0410-6.jpg" width="750" />

Step 2: Defining a Plugin Function (or Functions) for Use on a WordPress Website

This plugin demonstration will assume that the developer has created a href="http://codex.wordpress.org/Custom_Fields" target="_blank">custom field. This field will be used to determine whether or not social media links are included with the post so that users might share the post with their friends and family members who are subscribed to their social networking updates on sites like Twitter, Facebook, LinkedIn, and MySpace. A custom field has been created, in this case, named “social_links.”

Using the PHP code in the plugin, we will determine whether or not the social networking field has data inside of it. If it does, a “bar” of social media sharing links will be displayed. If it does not have any data within it, then these links will be omitted. This is a great way to disable the sharing of posts on your website which are simply not meant for viewing by the wider public, and doing it in a plugin is a great way to ensure that this functionality applies across all themes, rather than simply in one theme’s entry template.

This process is accomplished by “adding” an action to the WordPress code. This is done using the “add_action” PHP command, parked with several “echo” statements and existing lens of WordPress code that can be ported in directly from existing WordPress template files. Remember that virtually any variable which can be used in a template is also valid for inclusion within a plugin file, although the opening and closing PHP tags must be omitted as the code is already wrapped within one, all-enompassing opening and closing PHP tag enclosure.

Here’s what the added “action” looks like within the plugin file when it is completely filled out:

function social_links($post_ID){
global $wp_query;
$ID = $wp_query->post->ID;
if (get_post_meta(13); == 1)
{
return $post_ID . “Social Networking Link Buttons”;
}
else
{
return $post_ID . “”;
}
}
add_action(‘the_content’, ‘social_links’);

The first lines of code are simply used to determine whether or not any “meta” information has been filled out in the WordPress Dashboard for the specific entry being viewed. This is done by querying the WordPress database (using the $wp_query variable) and looking for information within meta field number 13. Each custom field is given a numerical identification, just like entries, comments, and pages. This number can be used within variables for conditional statements.

So, first the plugin looks into the custom field for each entry and sees whether or not content is present in the field’s database table. Next, it runs through the conditional. If the content equals “1,” it proceeds. The usage of “1” in this case means “if the field has data present.” The inverse of this would be “0” which would translate to “if the field has no data present.” So, if the field has data present, or equals “1,” the function proceeds to the first part of the conditional. That section provides for the display of social media sharing links. For the purpose of brevity, those links have not been included with the function. However, they can be pretend using simple XHTML within the quotes that follow the “return $post_ID” statement.

If the custom field does not have data present, it effectively equals “0” as far as this plugin’s code is concerned. However, because this conditional is an either / or statement, instead of one with many different outcomes, we simply use the “else” construction to instruct the plugin to print the alternative content under any other circumstances. In this case, it simply prints nothing. For this reason, all that needs to be placed within the function is:

return $post_ID “”

At the bottom of the statement, we add our new function as an “action” to the existing “the_content” PHP variable. This will append the social network sharing buttons to the bottom of an entry directly after the entry’s content is finished printing. The statements in this parenthetical statement are chronological, meaning the new action (“social_links”) could be placed before “the_content” if those buttons were supposed to be displayed at the beginning of the content, directly after the entry’s title has been printed onto the screen.

With the function completed, and the action added to the WordPress Loop directly after the entry’s main body of content is printed on tot he page, the plugin is essentially complete. This is the appropriate time to add the closing PHP tag, save the file, and upload it to the server for use.

Step 3: Activate the Plugin and Try it Out

The most important part of the process is activating the plugin and verifying that its functions work as expected and do not cause issues with any existing plugins or standard WordPress features. This is also a good time to verify the integrity of the PHP code and ensure that any output (XHTML or otherwise) prints as desired.

If any errors do arise during the activation and testing process, it’s important to check the plugin file and make sure that all statements are properly opened and closed. This means checking for punctuation, in many cases, including parentheses, semicolons, brackets, and lowercase letters. Remember that PHP is case sensitive, and it’s also punctuation-sensitive: Any unclosed statement essentially continues infinitely and can cause pages to simply not load, or load extremely slowly.

When all of the kinks have been worked out, the job is largely complete. However, there are a few additional considerations to keep in mind for other scenarios.

Step 4: Creating a Plugin ReadMe File

class="border" alt="Create A WordPress Plugin" src="http://www.webhostingsecretrevealed.net/images/2012/0410-8.jpg" width="750" />

If the plugin is intended for private use only, there is simply no reason to create a “ReadMe” file unless, of course, you’re afraid that you might forget what the plugin does, how it was built, or how it functions within the WordPress Loop itself. However, many developers create plugins with the intent to distribute them to the wider WordPress community and, with more than 60 million users, this is a lucrative way of promoting a website and earning secondary income.

Those users are virtually required to craft a ReadMe document that outlines the plugin’s functions, how to install the file to the server, and how to set it up and customize its functions. This file can also contain information such as change log which details every change and update made to the plugin over time. However, the important thing is to explain what the plugin does, how it works, and how to install it. Novice users won’t know what to do if they’re not guided through the process, much like novice plugin developers didn’t know how to create a new WordPress function until the last step of this guide.

When the plugin file has been completed and paired with a ReadMe file (typically a .txt file), it’s time to put both documents into their own folder and compress them using the standard ZIP file format. The plugin can then be uploaded to the WordPress Extend community of plugins and themes, as well as to the developer’s server for a self-hosted solution.

Relatively Easy to Do, Especially with WordPress Variables and Functions

The great thing about developing a new plugin for WordPress is that the file can use any existing PHP function, variable, or loop, which WordPress has already defined and initialized. This makes it easy to extend WordPress features and enhance their functionality across many themes, and it makes the plugin development process as easy as creating a new theme for the software itself.

Always remember to test for bugs, validation errors, and function conflicts before putting the plugin into active use or sharing with the wider WordPress community. When that process has been completed, and the plugin is working properly, the development stage is complete and you’ll be free to enjoy the success and new features you just created. ;)

Further readings on WHSR

To dig deeper on this, check out title="Must Have WP Plugins" href="http://www.webhostingsecretrevealed.net/blog/blogging-tips/20-must-see-wordpress-plugins/">Jerry’s List Of 20 Essential WordPress Plugins, href="http://www.webhostingsecretrevealed.net/blog/web-design/25-handy-code-snippets-for-wordpress-developers/">25 Handy Code Snippets For WordPress Developers, title="WordPress Tips" href="http://www.webhostingsecretrevealed.net/blog/blogging-tips/25-most-wanted-wordpress-tips-tricks-and-hacks/">Most Wanted WordPress Hacks, Tips, And Tricks; and, if you are looking for a good WordPress hosting, check out what I’ve been using recently – title="WP engine Hosting REview" href="http://www.webhostingsecretrevealed.net/hosting-review/wp-engine/">WP Engine – it’s quite an expensive host (thus not recommended to newbies) but you get what you pay for.


Page 24 – Web Hosting Secret Revealed




cPanel Basics for New Website Designers



alt="cPanel Basics for New Website Designers" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2015/04/default-image-500x308_c.jpg" />

class="border" title="cPanel Guide" src="http://www.webhostingsecretrevealed.net/images/2012/0727-1.jpg" alt="" width="750px" />

The majority of new website designers will use a shared hosting package, because it is the least expensive and most efficient option for the majority of small business owners. With that in mind, this tutorial covers the basics of using a href="http://cpanel.net/" target="_blank" rel="nofollow">cPanel for creating and managing your own website.

Your href="http://www.webhostingsecretrevealed.net/hosting-reviews/">web hosting company will give you a place where you can login to your control panel. This will typically be an address like:

Mydomainname.com/controlpanel

Or

Mydomainname.com:2082

Login with the username and password that your server provided and you’ll see a screen with icons that allow you to set up e-mail, backup files and so on.

E-Mail Basics

class="border" src="http://www.youtube.com/embed/l1Nytp4dWI8" width="600" height="450" frameborder="0" allowfullscreen="allowfullscreen">

One of the first things you’ll want to do when you get a new website is to set up your e-mail accounts. From the main page of your control panel, click on “Email Accounts.” Fill in the blanks for username, password and mailbox quota. Your webhosting provider may or may not offer online access to your e-mail account. If they do not, you can access it via Webmail or email software with the username and password information you’ve set up.

Fantastico

class="border" title="Fantastico at cPanel" src="http://www.webhostingsecretrevealed.net/images/2012/0727-5.jpg" alt="" width="750px" />

Fantastico is a true Godsend for new website owners. In fact, it is so handy that I would look for this as a feature when signing up with a new hosting company. More than likely, the company you choose will offer this feature as most do offer it through cPanel.  Fantastico helps you install software, much of it PHP based, without you having to know any coding. Some types of software you might see include:

  • WordPress
  • OScommerce
  • Joomla
  • phpWebSite
  • Gallery
  • PHPlist
  • Moodle

Choose the one you want to install, which directly you want it in and install. Poof! As easy as that, you are ready to start using the software. Of course, there are glitches at times, but you can always uninstall and start over.

Databases

class="border" title="cPanel Databases" src="http://www.webhostingsecretrevealed.net/images/2012/0727-3.jpg" alt="" />

This area of your control panel allows you to access databases and make changes. This might be necessary if you want to move your database, change the name of the database or when files become corrupted. Under the “Databases” section, you’ll find choices like MySQL, phpMyAdmin and Remote MySQL. Each one has a different purpose. For the most part, if you are making updates, you’ll use phpMyAdmin.

Security

class="border" title="Security Guide" src="http://www.webhostingsecretrevealed.net/images/2012/0727-8.jpg" alt="" />

Another important area of your cPanel is the “Security” area. If your site is targeted by hackers or you want to prevent a specific competitor from accessing your site, you can utilize this area to achieve that.

IP Deny Manager If a competitor regularly attempts to gather information or steals your great ideas and you know their IP, you can block them from seeing your site at all. This will only block them from the location from where they typically access your site, so they can still go to a different computer at a library or such and access. However, this will slow that person down. This is also a handy way to block hackers from your site.

Password Protect Directories Set up directories that only specific groups can access or that are hidden from everyone but you. You simply add another level of protection and the person must have the password to move forward in your site.

SSL/TSL Manager Generate secure keys to use with online shopping carts or when visitors are providing sensitive information that you’d like to keep encrypted.

Logs

class="border" title="Logs at cPanel" src="http://www.webhostingsecretrevealed.net/images/2012/0727-7.jpg" alt="" />

Your cPanel allows you to access logs that will provide you with vital information to keep your site running at optimal capacity. Some of the features found in this area include:

Latest Visitors Whether you’re running an ad campaign and want to see where the traffic is coming from or you are just curious about who is visiting your site when, this nifty feature will let you know. Lists IP number, referring URL and browser used.

Bandwidth If your server limits bandwidth, and most do, then you can double check your usage on this tab and make sure you aren’t going to go over. Bumping up to the next package can keep your site from having down time.

Webalizer This program tells you about your website’s traffic and helps you track changes over time. You’ll get details on IP address, referring sites, which pages are visited most and how many visitors you had on a day or at a certain time.

Other Things You Can Do Through cPanel

Most cPanels offer some additional options, but these can vary from server to server. Some of the more common and most useful features include:

  • Error Logs Find out which pages are not pulling up that visitors are trying to access as well as other errors within your site.
  • FTP Accounts Set up FTP access for someone doing temporary work on your site or additional helpers. Each can have a separate login, which allows you to track who has made what changes to your site.
  • Disk Space Usage If you are running out of space on your server and aren’t sure why, this tool can help you track down how much space each file is taking up. You may find that deleting a few heavy graphics and replacing them with compressed counterparts will make a huge difference in how much free space you have available for updates.
  • Restore Backups Some servers offer the ability to restore your site to their last backup. This can be helpful if your site has been hacked or all the files mysteriously become corrupted. It isn’t likely, but these things do happen, so finding a server that offers backups and lets you do the restore from them is a definite plus.

Now that you’re familiar with the basics of cPanel, you’ll have your new website running like a well-oiled machine.


Page 23 – Web Hosting Secret Revealed




The Basics Of Preventing A DDoS Attack



alt="The Basics Of Preventing A DDoS Attack" src="http://whsr.webrevenueinc1.netdna-cdn.com/wp-content/uploads/2015/04/default-image-500x308_c.jpg" />

DDoS attacks are relatively uncommon, but they do occur. Knowing how to protect your server from an attack helps to minimize potential downtime and reduces the potential damage. A DDOS attack results from poor security policies and improper monitoring of a web server. When a machine is under attack it takes the entire server down and the IT administrator is forced to take the entire machine offline to fortify and stop the attack. This results in server downtime and potential losses for the website owner.

How A DDoS Attack is Performed

src="http://www.webhostingsecretrevealed.com/images/2012/0514-1.jpg" alt="DDoS Infographic" class="border" />

Infographic quoted from Wired: href="http://www.wired.com/politics/security/magazine/15-09/ff_estonia_bots" target="_blank">When Bots Attack

A DDoS attack results from multiple dynamic networks that have been already compromised. The goal of an attack is to make it impossible for essential services to run efficiently resulting in a complete loss of system stability. The end result is that the server can’t handle the requests and is forced to shut down. One solution to this problem once it has started involves having an infinitely scalable environment that can handle large amounts of bandwidth and keep up with the demands of a DDoS attack.

There are three components to a DDoS attack. The Master controls the entire process and determines how and what machines are used to initiate the attack. DDoS attacks are coordinated attacks that provide the Master with the ability to control several Slave networks to attack the destination machine from multiple sources. The entire operation involves a complex network designed to disable the destination machine. The reasons for a DDoS attack are varied. Whether someone wants to take down a particular website as an act of protest or simply wants to disrupt the flow of information, a DDoS attack can effectively take down entire networks.

Two Stage Attack: Intrusion and Distributed DoS Phase

There are two main stages in a DDoS attack. The preparation stage involves probing for weak machines that have security vulnerabilities. In most cases, secured and up-to-date servers have nothing to worry about since the attacker will simply move on to an easier to break system. The Intrusion Phase looks for machines around that world that can be compromised and used to attack the intended target. The Distributed DoS phase involves the actual attack of the destination machine affecting the reliability of the website.

Understanding Security Vulnerabilities

Several security issues provide these opportunistic attackers a chance to take root and employ a successful DDoS attack. Software and applications that have not been updated to the latest versions provide the attacker with a weak system and known exploits that can be utilized in an attack. Servers that are set up with an open network and don’t have the necessary firewall restrictions make it possible to compromise a machine. Finally, a website server that doesn’t have regular monitoring and auditing makes it possible for intrusions to go unnoticed resulting in a compromised machine.

The best way to prevent attacks is to follow some basic preventative guidelines to minimize the possibility of a successful campaign.

Firewall Installation and Configuration

Setup and configure your firewall and make sure that "Anti-DoS" measures are activated. A firewall is the first line of defense against hackers. Your IT team should have the knowledge and experience to set up a firewall completely and securely to prevent unauthorized users and hackers from installing DDoS tools. If you don’t have the necessary experience or support team to manage a firewall, then look for managed hosting that will take care of these security measures for you. This is not something that an inexperienced website owner should attempt on their own.

Install IDS

Install IDS on your server to provide automated alerts when someone is attempting to evaluate the weakness of your website. This is also called sniffing and is one of the first signs of a impending attack. Setup a rule to allow for the monitoring of permissions, inode, users, groups, the number of links, sizes and md5 checksums. The rule should monitor only folders that are not changed often such as the "/bin," "/sbin" and "/var." Once that is setup execute AIDE.

Conducting Audits

Regularly search for rootkits using tools that scan your system for malware. During an audit, you should check for rootkits, out of date software, check to see if kernel upgrades are available, look for trojans, determine if there are any hidden processes, evaluate logs and email relays. Additionally, you should also perform a complete audit to detect unauthorized malicious chron entries, determine whether backups are functioning correctly, look for any unauthorized users and delete any users that are not used. Most servers don’t need every available process running. By disabling and optimizing the system to ensure that only necessary services are running, you can further protect the server from being compromised through an out of date or malfunctioning service. Also, check the system performance and run a memory test to ensure that everything functions properly. Finally, implement a good set of intrusion prevention tools to prevent and alert the IT administrators of a potential breach.

Install Mod_Security

Installing mod_security on your Apache server will help to ensure that a filtering system is in place to prevent attacks. Filtering systems send requests through an analysis process before allowing the web sever to process it. This helps reduce the possibility for malicious HTTP requests and breached in your security. Once Mod_Security is installed, set it up to provide sufficient protection for your server. This involves adding the strings and location to the mod_security configuration file.

Evaluating an Attack

Look at your servers load times and HTTP requests to determine if your website has been compromised. If the load is 5 or more, then check to see if there are also a large number of HTTP requests being processed. Any activity that is out of the ordinary should immediately be investigated to improve the chances of stopping the attack. Severs with a heavy load often have around 100 or more connections. However, a server under attack has an even higher number of connections. The key element to look for is how the current load differs from a normal load. If the average load involves 50 connections and the server currently has 500, then something is wrong and an investigation is necessary. Once it has been established that a DDoS attack is being implemented, finding the compromised network should be the next step in the process. Sometimes, it isn’t always immediately obvious that a machine is under attack.

By determining an attack early on, it may be possible to combat and stop the attack in its tracks before it becomes a more widespread issue. However, if the destination machine is bombarded by several slave machines, it will take a significant amount of time to block each IP and host involved in the attack.

Combating an Attack

id='floatright'>src="http://www.webhostingsecretrevealed.com/images/2012/0514-2.jpg" alt="Fighting DDoS Infographic" />

To combat an attack, you will need to go through each block of IPs that are currently connecting to the machine to see if they come from the same network. If there are more than 5 IPs or hosts from a single network, then the machine is certainly under attack and you will need to take precautions to disable and prevent the attack from continuing. To stop the attack, you’ll need to manually block the IPs in question using a firewall on your machine. You’ll need to continue this process until all of the machines involved in the attack are blocked. This can take some time and often can be especially difficult on servers with high amounts of traffic. In the end, if someone wants to attack your server, there isn’t too much you can do once the attack starts. You must use preventative measures to head off an attack before it starts. Preventative measures help to secure the system and make sure that the attack doesn’t happen in the first place.

Of course, no system can be completely protected from a DDoS attack, but the more secure services are generally ignored in favor of easier, open and less secure servers.

The Importance of Monitoring and Auditing

While it is impossible to prevent an attack by someone that is determined to infiltrate and take down your system, basic security practices and regularly auditing can help prevent the possibility of a successful attack. If an attack becomes so severe that it threatens the hardware of the server, then you will have to shut down the server, analyze the logs and block any incoming IPs and hosts that are attempting to infiltrate your system. Even if you are not the victim of an attack, as an owner of a web server, you have an obligation to ensure that your applications, security and processes are up-to-date to prevent the possibility of someone using your network as a launching pad for these types of attacks. Audits should be completed on a regular basis. For large companies it is not uncommon for quick audits to be run daily to ensure that the system is protected from attacks and to ensure the maximum efficiency and reliability from the web server.

Digging Deeper On DDoS Attack

There are plenty of href="http://en.wikipedia.org/wiki/Denial-of-service_attack#Methods_of_attack" target="_blank">methods to launch a DDoS attacks – plenty technical stuffs to read, plenty protections need to be done. Personally I am relying a lot on my host href="http://www.webhostingsecretrevealed.com/wpengine-review/">WP Engine (which did a very good job in blocking attacks and hacks) on this matter but if you wish to learn more, I suggest further reading on Dave Taylor’s href="http://www.askdavetaylor.com/deal_with_ddos_distributed_denial_of_service_attack.html" target="_blank">How do I deal with DDoS Attack and Steven J. Vaughan-Nichols’ href="http://www.zdnet.com/blog/networking/how-to-try-to-stop-ddos-attacks/440" target="_blank">How to try to stop DDoS Attack.


Page 24 – Web Hosting Secret Revealed