Make text bigger  Make text smaller  Toggle background color  Bookmark/Share


SECURE FILE PERMISSIONS MATTER

Summary: A web horde had a crappy server pattern which authorised people on a same box to review any others’ pattern files, as well as a little members of a “security” press have attempted to spin this in to a “WordPress vulnerability” story.

WordPress, similar to all other web applications, contingency store database tie info in transparent text. Encrypting certification doesn’t make a difference since a keys have to be stored where a web server can review them in sequence to decrypt a data. If a antagonistic user has entrance to a record complement — similar to they appeared to have in this box — it is pardonable to acquire a keys as well as decrypt a information. When we leave a keys to a doorway in a lock, does it assistance to close a door?

A scrupulously configured web server will not concede users to entrance a files of an additional user, in any case of record permissions. The web server is a shortcoming of a hosting provider. The methods for we do this (suexec, et al) have been around for 5+ years.

I’m not even starting to couple any of a articles since they have so most inaccuracies we spin stupider by celebration of a mass them.

If you’re a web horde as well as we spin a bad record permissions story in to a WordPress story, you’re we do something wrong.

P.S. Network Solutions, it’s “WordPress” not “Word Press.”

See a strange post: 
Secure File Permissions Matter


Get Auto Caffeinated Content for Your WordPress Blog



FUNDAMENTALS OF A/B AND MULTIVARIATE TESTING

A/B as well as Multivariate Testing

Many companies be concerned so many about how many trade they can expostulate to their website.  The genuine concentration should be how can we modify some-more website visitors? Effective website contrast can assistance enlarge site performance, usability as well as conversions.

By regulating A/B as well as multivariate testing techniques, we can examination with opposite pattern elements to find a winning combination.

Lets take a demeanour at a fundamentals of both A/B as well as multivariate testing.

A/B Testing

By clarification A/B contrast or separate contrast is contrast a effectiveness of a single alighting page over another. Normally a stream alighting page will be used as a control, as well as a second page with a little changes to a strange will be used as a experiment.

There have been a series of different elements which can be tested together with colors, fonts, layouts, graphics, icons, headlines, offers, etc.

For this example, we will be regulating a Google Website Optimizer, a giveaway contrast apparatus which allows we to perform as well as lane A/B as well as multivariate tests.

1.  Identify a Page to Test

Decide on a page we would identical to to test.  It’s endorsed which we select a page with high traffic so we can accumulate interpretation faster as well as have a conclusion.

Once we have selected a page, confirm on a single member which we would identical to to make make make use of of of as your contrast element. Be confidant when it comes to your contrast element. If we simply shift a single word in a title or shift a tone from black to grey, your chances of saying conspicuous differences have been minimal.

ab-testing-version-a1 Fundamentals of A/B and Multivariate Testing

ab-testing-version-b1 Fundamentals of A/B and Multivariate Testing

2.  Choose a Conversion Page

Decide on a desired goal which we wish to track. That can be a hit form submission, a download, a purchase, a sign-up, a time-on-site goal, etc.

If we have been tracking a form submission, squeeze or a sign-up…you will wish to have a singular “thank you” url which we can make make make use of of of as your execution page.  This is a url we will supplement in a goals.

URL Goal in Google Analytics:  Analytics Settings >> Edit >> Add Goal >>

Name a Goal, Choose “URL Destination”, afterwards insert a singular URL underneath “Goal URL”

If we have been seeking to lane an rendezvous on your site identical to Time On Site or # of Pages Visited:

URL Goal in Google Analytics:  Analytics Settings >> Edit >> Add Goal >>

Name a Goal, Choose “Time on Site” or “Pages/Visit”, afterwards come in a length of engagement.

conversion-page2 Fundamentals of A/B and Multivariate Testing

If we have been seeking to lane rendezvous goals, any site is different, so there will not be a benchmark to go off of….except your own.  Monitor your stream time on site as well as pages visited, afterwards watch your swell over time to see your metrics have softened or declined.

3.  Set up Tracking Scripts

In sequence to lane your examination scrupulously we will need to supplement tracking scripts to your control, test, as well as idea pages.  Depending on which contrast program we use, it might really slightly, however they have been really identical when environment up a tracking.  Usually it will be a tiny dash of java-script code.  For Website Optimizer we can see a full designation beam here.

There have been dual sorts of book which needs to commissioned on your pages. Although it looks complicated, any set of book serves a purpose:

  • First, there’s a carry out script. Among alternative things, a carry out book creates certain which a examination variations have been switched incidentally as well as which all variations have been displayed an next to series of times. For this examination (and in many cases), place a carry out book rught away after a <head> tag. You’ll need to implement a carry out book usually on your strange exam page. For this examination (and in many cases), place a tracking book rught away prior to a shutting </body> tab in any page.
  • The second set of book is a tracking script. It ensures which visits to both a exam page as well as a acclimatisation page have been tracked by Website Optimizer for a experiment. For this examination (and in many cases), place a tracking book rught away prior to a shutting </body> tab in any page. You’ll need to supplement a tracking book to your strange exam page, any of a swap movement pages you’ve created, as well as your acclimatisation page.

4.  Decide on A/B Distribution, afterwards Start!

Depending on a series of tests we have been running, we will have to confirm on what commission of your traffic will be displayed a carry out page as well as chronicle A, chronicle B, etc. If you’re contrast 2 pages, bursting a trade up with 50% for any page is a simplest approach to do it.

I would suggest starting with usually a single variable (i.e. your normal page, as well as a page with a single thing changed), unless we have a vast volume of trade to send to mixed exam pages.

conversion-page11 Fundamentals of A/B and Multivariate Testing

5.  Analyze Results

Your contrast efforts meant zero if we don’t investigate a formula as well as implement changes formed on them. Google Website Optimizer has good stating facilities which concede we to see which movement was some-more successful.

In this shade shot we can see a opposite variations which were tested, a estimated acclimatisation rate, chances to kick a strange page, as well as a tangible improvements.  The immature percentages have been improvements, whilst a red have been variations which perform worse than a original.  To a distant right we can see a series of conversions as well as impressions which any movement received.  Again, a critical to state which unless we have a tall series of conversions, we might wish to begin with a single variation.

website-optimizer-results Fundamentals of A/B and Multivariate Testing

Multivariate Testing

A some-more formidable test, a multivariate test allows we to exam mixed page variables at a single time.  Unlike A/B testing, multivariate contrast can radically exam endless non-static combinations.

The usually stipulations have been a amount of time it will take to benefit enough data to come to a in accord with conclusion.  The some-more components we supplement to a test, a longer as well as some-more interpretation we will need to finish a test.

The routine of conceptualizing a multivariate examination is really similar to environment up an A/B testing experiment, however, what to exam is somewhat some-more involved.  This striking is a good illustration of how any user is shown opposite elements on a page.

multivariate-testing-image Fundamentals of A/B and Multivariate Testing

Website Testing Tools as well as Resources

Testing Tools:

Further Resources & Readings:

Recommended Books:

It should be pronounced which we can perform these contrast techniques on not usually web pages, though email selling campaigns, ensign ads, as well as paid chain campaigns.

It should additionally be remarkable which we should always be testing. Just since movement A kick out your strange page, doesn’t meant we should hang with which page. Try contrast movement A with movement B to see if we can go on to improve.

Website contrast is apropos a categorical member in some-more as well as some-more association selling strategies. Marketers have been commencement to comprehend which mending a acclimatisation rate for existent trade can be many more in effect than perplexing to expostulate some-more traffic as well as modify less.

Have we experimented with A/B or Multivariate contrast before? I’d adore to listen to your practice as well as what tools of your site we tested!

 Fundamentals of A/B and Multivariate Testing

More here: 
Fundamentals of A/B as well as Multivariate Testing


Get Auto Caffeinated Content for Your WordPress Blog



EDUCATING WEB DESIGNERS ON GOOGLE ANALYTICS

Google Analytics for Web Designers

Most web designers have listened of Google Analytics, though most of them have not taken a time to assimilate only how profitable a interpretation can be.  There is a resources of believe we can good about your web trade which can assistance urge your site pattern as good as selling efforts.

For web designers it is critical to assimilate how visitors have been interacting with your site. What pages have been visitors alighting on? What pages have been visitors exiting on?  How prolonged have been visitors staying on site?  Where have been visitors withdrawal in a acclimatisation funnel? All of these questions have been consequential for branch a flattering website, in to a flattering website which converts!

Let’s mangle down a critical caller interpretation specific to web designers which will minister to improving usability, engagement, as good as acclimatisation rates.

Entrance Pages

top-entrance-pages Educating Web Designers on Google Analytics

In Google Analytics:  Content >> Top Landing Pages

It is critical to assimilate what pages users have been entering on when they get to your website.  For brand brand new visitors, this will be a initial time they crop your site, so we will wish to have certain a page they land on is enchanting as good as compelling.  Are they alighting on a homepage?  a have make use of of page?  a viral blog post?

For a standard association website, it is normal for a infancy of users to come in on a homepage or a have make use of of page. For a blog or headlines focused site, it is not unheard of for renouned posts to be a tip opening page.  Look at a top alighting pages as good as a rebound rate side-by-sideDo we notice a page which has a noticeably aloft rebound rate than a alternative pages? There could be a series of reasons since this is.

  1. The page was not applicable to their poke query
  2. The calm was not enchanting sufficient to keep a user on a page
  3. They were celebration of a mass which days blog post, afterwards left (usually enters around approach traffic)

For designers, demeanour at a page as good as see if there have been things which can be softened from a pattern standpoint.

  1. Try a opposite calm layout
  2. Try a brand brand new call to action/offer
  3. Test a opposite headline
  4. Test opposite graphics/icons/fonts/colors

Which ever have been a tip alighting pages, these have been a pages which get a most attention.  Whatever a clients objectives/goals, try to work in ways we can soak up those goals onto a page.  Add a quick hit form, have a phone series distinguished to tempt users to call, emanate a download graphic, etc…

Exit Pages

top-exit-pages Educating Web Designers on Google Analytics

In Google Analytics:  Content >> Top Exit Pages

If visitors have been consistently exiting on a certain page(s), demeanour at a page as good as ask yourself why?  Similar to alighting pages which visitors have been entering on, demeanour to see if there have been ways to urge a page.  Typically particular blog posts will have tall rebound rates since a user reads a post afterwards leaves.  In sequence to keep a user intent in a content, try adding applicable links to alternative calm via post.  For e-commerce sites, try adding identical or nominal products which a customer might enjoy.

Bounce Rate

bounce-rates Educating Web Designers on Google Analytics

In Google Analytics:  Visitors >> Visitor Trending >> Bounce Rate

Just to conclude Bounce Rate quickly, it is when a caller enters a page, afterwards leaves but on vacation an additional page or is resting for over thirty minutes.  As we discussed, rebound rate is a some-more utilitarian statistic for e-commerce site, rsther than than blogs or headlines sites since there have been some-more variables to take in to consideration. Users who revisit blogs often bookmark web pages to perspective later, which can askance results.

Nevertheless, web designers can have make use of of this report to assistance good discernment on what pages need attention.  Try regulating a contrast program similar to Google Website Optimizer to run A/B as good as Multi-Variate tests to urge page engagement.

Also check out Lowering Your Bounce Rate: What to Analyze

Time On Site

average-time-on-site Educating Web Designers on Google Analytics

In Google Analytics:  Visitors >> Visitor Trending >> Time On Site

Usually a longer we can keep someone on a site, a some-more expected they have been to modify in to a lead/customer. Many times we will notice a association in between rebound rate as good as time on site.  If a visitors time on site is really low, typically a rebound rate will be really high.  So what can we do to keep people on your website longer?

  1. Add a video which explains a service/product
  2. Add graphics which assistance insist a content
  3. Make certain there is a unchanging blueprint opposite all pages
  4. Fix any damaged images or links
  5. Add a check or survey
  6. Incorporate amicable media facilities (Google Friend Connect, Tweetmeme button, etc…)

Goals/Conversion Funnel

goal-conversion-funnel Educating Web Designers on Google Analytics

In Google Analytics:  Goals  >> Funnel Visualization

Probably a most critical interpretation to demeanour at is a goal cognisance funnel. This graph will uncover we where visitors come in a conversion process as good as at what step users exit or finish a funnel. This graph can brand flaws in your sales process.  It could presumably be which an blunder is occurring during a routine as good as users have been incompetent to pierce on to a subsequent step.  It might additionally be which your checkout routine involves as good most stairs or which we ask for as good most report so nobody is stuffing out a form.  Especially for e-commerce sites, it is critical to optimize a checkout process by minimizing a series of stairs it takes to squeeze as good as charity mixed remuneration as good as shipping methods.

Here have been a little discerning tips to assistance with a checkout/goal funnel.

  1. Add fields which have been MANDATORY only
  2. Remove “Optional” fields
  3. Explain which we do not spam
  4. Add secure remuneration logos
  5. Give mixed payment/shipping options
  6. Show a transport outline during a process
  7. Remove nonessential stairs or combined

Browser Type

browser-type Educating Web Designers on Google Analytics

In Google Analytics:  Visitors >> Browser Capabilities >> Browsers

When seeking at browser sorts it is critical to see which browsers as good as browser versions people have been still using.  Just since a website looks excellent in Firefox 3.5 or IE 8 doesn’t meant which someone regulating IE 6 will not have issues digest a page.

Seeing browser stats will have we wakeful of which versions we still need to have certain a website renders scrupulously in.  If we notice which reduction afterwards 1% of a visitors have been regulating IE6, it substantially is not value your time to figure out since something is not operative properly.

To find out how to exam your site in all browsers (Including mobile ones), have a demeanour at a post on how to exam a blog.

Screen Resolution

screen-resolutions Educating Web Designers on Google Analytics

In Google Analytics:  Visitors >> Browser Capabilities >> Screen Resolutions

5 years ago web designers used to pattern a website for 800 x 600, right away with prosaic shade monitors apropos a norm, a minimum shade resolution is customarily around 1024 x 768. Screen fortitude interpretation can have a large stroke on how we pattern your site.  Analyzing fortitude interpretation over a duration of time can concede we to see trends in user monitors.

Mobile Devices

mobile-devices Educating Web Designers on Google Analytics

In Google Analytics:  Visitors >> Mobile >> Mobile Devices

With a creation of intelligent phones as good as alternative mobile devices, there has been an enlarge in mobile web usage.  This has done web designers rethink how they pattern web sites.  Using Google Analytics, we can begin to see an enlarge in a volume of mobile device traffic.  Now which people have been browsing websites on their iPhone’s as good as Blackberry’s, conceptualizing a mobile chronicle of your site (or for blogs; ensuring your normal website displays well) is needed to support to these visitors.

If we haven’t commissioned an analytics resolution on your website, go pointer up for a free Google Analytics account as good as begin tracking your caller data.  If we only take twenty mins a week to investigate a interpretation as good as see what users have been we do on your site, it can assistance assure we which your designs have been we do what they were meant to do.

I would adore to get a little feedback from web designers.

How do we implement web analytics interpretation to good a altogether designs of your sites? What alternative analytics solutions do we have make use of of to assistance assimilate your web visitors?

 Educating Web Designers on Google Analytics

See a strange post: 
Educating Web Designers on Google Analytics


Get Auto Caffeinated Content for Your WordPress Blog



DISPLAY PRIVATE POSTS TO LOGGED IN USERS

WordPress-Christmas-15 Display Private Posts to Logged in UsersSometimes we make use of a duty of in isolation posting in WordPress. These contributions can usually see a user who has combined a post, or a administrator. To uncover all these essay to users who have been logged in to a system, we can go opposite ways. But I’d similar to to prominence usually dual opposite ways.

With law fields

With a assistance of law fields we emanate a private field; if we can see in isolation posts, this margin has true in a field. This field, we afterwards question in a double back on outlay in a frontend.

if ( have_posts() ) :
	while ( have_posts() ) : the_post();
	// a loop
	$private = get_post_custom_values('private'); // review law field
	if ( isset($private[0]) && $private == 'true' ) {
		if ( is_user_logged_in() ) {
			// arrangement in isolation post, usually logged users
		}
	} else {
		// arrangement open post, for each visitors
	}
 
	endwhile;
endif;

With capabilities

Another process is, to allot around duty capabilities to a suitable role. You can do this with a assistance of a Plugin, for e.g. Members, or usually with a formula dash in functions.php of a theme. You have to call a dash usually once, after which we can undo it, given a capacity is saved in a interpretation base.

Ad capabilities to review in isolation posts read_private_posts to a purpose of a author.

function fb_add_cap2role() {
	global $wp_roles;
 
	$wp_roles->add_cap('author', 'read_private_posts');
}
add_action( 'init', 'fb_add_cap2role' );

Also we can additionally mislay a rights again. This is probable with a following solution:

function fb_remove_cap2role() {
	global $wp_roles;
 
	$wp_roles->remove_cap('author', 'read_private_posts');
}
add_action( 'init', 'fb_remove_cap2role' );

Related posts:


WP Engineer Favicon Thanks for subscribing a feed! Sponsor a WP Engineer Blog as well as get your code in front of multiform hundred users per day!
© WP Engineer Team, All rights indifferent (Digital Fingerprint: WPEngineer-be0254ce2b4972feb4b9cb72034a092d)

Here is a original: 
Display Private Posts to Logged in Users


Get Auto Caffeinated Content for Your WordPress Blog



FEED CACHE IN WORDPRESS

WordPress already offers a probability of own functions to review feeds as well as have make make make use of of of of it in your blog. Since chronicle 2.8 of WordPress, a code new underline is in have make make make use of of of of for that. So there have been dual ways to work with feeds in WordPress, as well as in both functions, a interpretation is cached. But this is not regularly wanted, so we uncover how to take change on caching of a dual functions.

fetch_feed() Since WordPress 2.8

With chronicle 2.8 of WordPress, they supplement a category SimplePie in to a core. SimplePie has regularly renowned by a really fast growth as well as a fast user-friendly class. Before MagpieRSS has been used, that in most cases was not accessible as well as a growth is rsther than slow. For a tiny time SimplePie is no longer be confirmed by a developer, that disturbed a developer community. But developers from a WordPress group took caring of it as well as keep a category alive. More report can be find on a blog WP Dev Updates

Now a category is in a core of WordPress as well as is able of generating RSS as well as ATOM feeds. It uses a cache of WordPress as well as can be tranquil around a hook.

But initial a tiny representation to review a feed with a category in WordPress.

<?php
include_once(ABSPATH . WPINC . '/feed.php');
$rss = fetch_feed('http://bueltge.de/feed/');
$rss_items = $rss->get_items( 0, $rss->get_item_quantity(5) );
if ( !$rss_items ) {
    echo 'no items';
} else {
    foreach ( $rss_items as $item ) {
        echo '<p><a href="' . $item->get_permalink() . '">' . $item->get_title() . '</a></p>';
    }
}
?>

The tiny representation reads my feed as well as earnings a final 5 entries.

Essential is a duty fetch_feed(). This duty has a offshoot that can have change on caching – wp_feed_cache_transient_lifetime.
The customary of a cache is set to twelve hours ( 43,200 ), that is not regularly a a one preferred sourroundings for users. The worth is operated on a process WP_Feed_Cache_Transient(), parameter $lifetime. Therefore, it is receptive to advice to have make make make use of of of of a following tiny query, be it in a Plugin or in a functions.php of a theme.

add_filter( 'wp_feed_cache_transient_lifetime', create_function( '$a', 'return 1800;' ) );

In this example, we set a cache to thirty minutes. With a assistance of Conditional Tags we can carry out a total of it so that a cache-hook is customarily activated when we click on a page (is_page()) or for e.g. we have been in a front finish (!is_admin()) of a blog. Here we contingency simply have make make make use of of of of a opportunities as well as conform to your own needs.

A tiny probability we would similar to to indicate out more, available as of WordPress 2.9 (ticket 11117), to facilitate debugging for developers. Thus, a cache is infirm in a environment, if a consistent WP_DEBUG is set, that can be critical right away as well as then. Setting a consistent is customarily finished in a wp-config.php of a installation, or as pick in a Plugin.

function do_not_cache_feeds(&$feed) {
	$feed->enable_cache(false);
}
 
if ( defined('WP_DEBUG') && WP_DEBUG )
	add_action( 'wp_feed_options', 'do_not_cache_feeds' );

fetch_rss()

Another duty is fetch_rss(), that was set with WordPress 2.8 on a torment list. As an alternative, a on top of duty is active. Current is fetch_rss() still accessible as well as is additionally supported. Therefore, for completeness, additionally a probability to change a cache.

Here an e.g. to review feed as well as outlay a final 5 entries of a feed

<?php
include_once(ABSPATH . WPINC . '/rss.php');
$rss = fetch_rss('http://bueltge.de/feed/');
$rss_items = array_slice($rss->items, 0, 5);
if ( empty($rss_items) ) {
    echo 'no items';
} else {
    foreach ( $rss_items as $item ) {
        echo '<p><a href="' . $item['link'] . '">' . $item['title'] . '</a></p>';
    }
}
?>

Here, a duty fetch_rss() is used for celebration of a mass as well as a cache can be altered around a constants. This contingency tangible possibly without delay in wp-config.php where they will request globally to all applications, or we need to confederate them in to a own functions.

define('MAGPIE_CACHE_ON', 0); // deactivate cache
define('MAGPIE_CACHE_AGE', 60*60) // Cache 1 hour in seconds

Conclusion

Since WordPress motionless not to await MagpieRSS any longer in a future, we should customarily understanding with SimplePie as well as not with a second possibility.


Related posts:


WP Engineer Favicon Thanks for subscribing a feed! Sponsor a WP Engineer Blog as well as get your code in front of multiform hundred users per day!
© WP Engineer Team, All rights indifferent (Digital Fingerprint: WPEngineer-be0254ce2b4972feb4b9cb72034a092d)

Read more:
Feed Cache in WordPress


Get Auto Caffeinated Content for Your WordPress Blog



HOW TO: HACK WORDPRESS THEME TEMPLATE PAGES

The pass to being means to arrangement just what we wish in Wordpress is bargain Wordpress thesis template pages. These have been a thesis files which arrangement pages, not a ones which perform functions similar to comments, sidebar, etc

Read more: 
How To: Hack WordPress Theme Template Pages


Get Auto Caffeinated Content for Your WordPress Blog



EMBED WORDPRESS FUNCTIONS OUTSIDE WORDPRESS

From time to time we need interpretation from WordPress, though should not displayed in a system; they have been required outward a installation. There have been fundamentally dual options. Content can be utterly easy yield around feed as well as processed or we benefit entrance to a system

Read a strange here: 
Embed WordPress Functions Outside WordPress


Get Auto Caffeinated Content for Your WordPress Blog



NEW DATACENTER FOR WORDPRESS.COM

Towards a finish of 2008, you brought online a brand new datacenter to offer a over 5.5 million blogs right away hosted on a WordPress.com platform.

View strange here: 
New Datacenter for WordPress.com


Get Auto Caffeinated Content for Your WordPress Blog



NEW DATACENTER FOR WORDPRESS.COM

Towards a finish of 2008, you brought online a brand new datacenter to offer a over 5.5 million blogs right away hosted on a WordPress.com platform. Adding a interpretation core in Chicago, IL gives us a sum of 3 interpretation centers opposite a US that offer live calm at any since time.

Original post:
New Datacenter for WordPress.com


Get Auto Caffeinated Content for Your WordPress Blog



JANUARY 2009 WORDPRESS STATISTICS NOW AVAILABLE

For those meddlesome in monitoring a swell of WordPress.com, Matt has posted a Jan census data for WordPress. Here have been a census data Matt has provided: 372,519 blogs were created.

Read a strange post:
January 2009 WordPress Statistics Now Available


Get Auto Caffeinated Content for Your WordPress Blog

Pages