Page 13 – WPBeveiligen

Restoring WordPress after a failed update

13 November 2023/0 Comments/in Solutions

If a WordPress update fails and certain plugins stop working, you can follow these steps to restore your WordPress site:

Restoring WordPress after a failed update – 4 steps!

First, create a backup of your current state (before anything else goes wrong!)
Download an older release of WordPress (the last version that was working properly)
Start an FTP program that allows you to view and edit your site’s data
Delete the current WordPress installation, and manually upload the older version of WordPress (see the image above for reference)

Please note that restoring an older version of WordPress should be done with caution, and it’s always best to have a backup of your site before attempting any major changes.

10 reasons why you’ll be happy with WordPress

12 November 2023/0 Comments/in Internet and more

Here are some reasons why WordPress is a popular choice:

The active community where you can ask questions and get help
The vast number of plugins available
The wide variety of free and premium themes
The availability of a Dutch admin panel
Good visibility in Google search results
The ability to upload images and videos using the media uploader
Frequent updates with new features and security enhancements
The longstanding reputation that WordPress has built
It is free to download and use!
The large number of programmers and web designers who can work with WordPress

Using WordPress for business

11 November 2023/0 Comments/in Internet and more

WordPress is an excellent platform for representing your business online. Here are some reasons why WordPress is a great choice for business use:

Easy to use
Can be managed by multiple users through the admin panel
Transformable into a powerful marketing machine with plugins
Free to use
Performs well in Google search results

Once you install WordPress, you can immediately start creating pages and news articles. Using a good theme, you can present information and leave a good impression on potential customers.

Get more out of your website with the right plugins

There are several essential plugins that can turn your website into a powerful marketing tool:

Yoast SEO – Optimize descriptions for Google to attract more visitors.
Count per day – Monitor daily, monthly, and yearly visitor statistics and where they come from.
Contact form 7 – Create custom contact and quote forms.
iThemes Security PRO NL – Protect your website against hackers and brute force attacks.
WooCommerce – Integrate a webshop into your website.
Search meter – Track search queries within your website to understand what your customers are looking for.

WordPress allows you to create an affordable and professional business website! If you have any tips for plugins, feel free to share them in the comments!

Making your WordPress website faster

10 November 2023/0 Comments/in Internet and more

Here are some tips on how to make your WordPress website faster:

Use fewer plugins: Every plugin adds its own CSS, jQuery, and PHP/HTML code to your website, which can slow down loading times.
Choose a good hosting provider: Invest in a hosting provider in the mid-price range (30-75 euros per year). These providers often offer better performance than cheaper options. Hosting providers that use PHP 7 are generally faster than those with PHP 5.
Secure your website: A well-secured website is better protected against attacks and incorrect requests that can burden the server.
Use a caching plugin: Cache plugins can make your WordPress website faster, but be aware that some cache plugins have had security vulnerabilities in the past.
Optimize image sizes: Resize images to an appropriate size. Large images can slow down your site, especially if used in sliders where all images are loaded before the site is displayed.

How fast is your WordPress website?

You can use GTmetrix, a free tool, to measure the speed of your WordPress website.

When you run a test, you’ll see how your website scores in terms of PageSpeed:

A PageSpeed score of 97% might be challenging to achieve, but aiming for a score of 70-80 is important.

You’ll also see the loading time of your website and the total size of your website in MB:

GTmetrix provides more information to help you speed up your website. Visit GTmetrix to learn more.

Is your WordPress website still slow?

If your WordPress website takes 10 seconds or longer to load, you can contact us to optimize it and achieve loading times of 3-5 seconds.

Contact us!

Plugins? Don’t!

9 November 2023/0 Comments/in Plug-ins

That plugins are vulnerabilities for hackers, we have known for a long time. Right? And that plugins are constantly being hacked is well-known among WordPress users.

No?

Then, this is a wake-up call…

5 Popular Plugins Often Hacked

WP Super Cache
Hacked 10 times in 2 years!
All in one SEO pack
Hacked 5 times in 2 years.
BB-press
Hacked every year: 2014, 2015, 2016.
WooCommerce
The list is too long to put down, hacked 21 times in a few years.
Nextgen Gallery
Who hasn’t used it for photo albums?
Bonus: Jetpack
Used by millions of websites but often found vulnerable!

And the list of hacked plugins goes on…

There are many plugins that have been hacked, see WPvulndb.com.

Both unknown and the most popular plugins fall victim. Hackers target popular plugins because they know that way they can affect many websites.

Note: Hackers write a script that automatically scans websites on the internet for vulnerable plugins. This happens with hundreds of websites per hour; the hacker is, of course, not manually hacking each website.

What Does This Mean for My WordPress Website?

Use as few plugins as possible and don’t leave them deactivated on the server!

Keep the plugins up-to-date or ensure good security.

Have a backup! This way, you can restore the website to a point before the hackers got in and then update or remove the plugins.

Have You Been Hacked?

If your WordPress website has been hacked, you will need to thoroughly examine WordPress and all files on the server to remove the backdoors and scripts. Then, you’ll need to work hard to secure the website.

Alternatively, you can leave it to us:
Let us restore your hacked WordPress website.

Update plugins or not update plugins?

8 November 2023/0 Comments/in Plug-ins

Updating plugins… you can do it with one click, but if your website encounters a conflict with other plugins, the theme, or WordPress, you can’t undo it with one click!

What to Do If a Plugin Update Causes an Error

You can find the old release of that plugin and replace the latest plugin with the old release using an FTP program.
You can restore a backup, and if you don’t have one, contact your web host. They might have a backup from a week or longer ago.
You can check if there is already a topic opened about it on the official WordPress NL forum.
Or follow the paths and instructions shown in the error and dive into the code to fix it. (For advanced users)

Can You Know in Advance If a Plugin Will Cause an Error?

You can only know this if you do research on Google or the WordPress forum. Type the name of the plugin and add “update error” or “update bug” after it. But that’s searching for problems. Checking if a plugin causes issues is actually a lot of work that few people want to do.

How to Identify Which Plugin Is Causing the Error?

If the plugin(s) have been updated, and you see an error on your website, you can deactivate the plugins one by one until the error disappears. Once the error is gone, you will know which plugin is causing it.

If your website shows a “white screen” without an error message, you can enable error display in the wp-config.php file by setting DEBUG MODE to TRUE

The Convenience of Having a Backup

If only you had a backup! Then you could easily restore your old plugins with a few mouse clicks. A backup is essential when you regularly update plugins. Backups can be done in various ways, manually through FTP, via Cpanel-Directadmin, or using a backup plugin.

Psst: Don’t Tell Anyone

We recommend not updating plugins every week/month when a new release is out, but rather every 4-6 weeks. Often, these releases include new features that might bring along bugs (code conflicts). Only update immediately when it’s necessary, such as with a security update.

Use your judgment and insight when updating; don’t click on the “update” link immediately when a new update appears!

Recognizing a WordPress virus

7 November 2023/0 Comments/in Solutions

A WordPress virus is not a familiar term to most people. However, this term is used to refer to unwanted files on the server.

Definition of the word Virus: an infection, a self-replicating bacterium in the computer world, referring to unwanted files within a system.

In other words, you have an “infection,” and there are files on your server that do not belong there. You are dealing with a virus as these files will spread once they find their way onto the server.

To determine if your server/website is infected with a WordPress virus, it is important to distinguish between the three types of files.

Explanation of Different Files on the Server

Regular WordPress files that belong there.
Regular files that are infected/injected with malicious code.
New files created by the virus or at the beginning of the virus.

How to Recognize Virus Files on the Server

Note: You will need FTP access to the server using an external FTP program.

Virus files are often created later and have modified or created dates different from all other files.
These files are often encoded with Base64 and Eval to avoid detection by the server.
The names of the files differ from the original WordPress files (e.g., Core.php – deleteme.php – test.php – inc.php).
The codes supporting the virus are all concatenated together without proper formatting.
With a good server antivirus, they are labeled as suspected.php.

Preventing a WordPress Virus from Infecting Your Server

As the old saying goes, prevention is better than cure, and this is certainly applicable in this case.

There are two factors to consider:

The hosting provider responsible for updates (Note: with a VPS, you need to do this yourself).
The antivirus you use for WordPress.

The hosting provider will always hold you responsible for what happens to your WordPress website and how it affects the server. Therefore, ensure your WordPress is up-to-date and secure.

If You Already Have a WordPress Virus

If you are reading this article because there is already a virus on your WordPress (and hence on the server), you can use the five points described above to make the server virus-free. However, this is not easy and requires a lot of knowledge of code, WordPress, server files, and file permissions.

WPbeveiligen works full-time to secure WordPress websites and, when it’s already too late, restore them.

Displaying your WordPress website in multiple languages

6 November 2023/0 Comments/in Plug-ins

Showing your website in multiple languages is important if you have an international business. While the Netherlands has much to offer in the business world, you may want to expand your company’s reach to broader markets like the English or American market. At the time of writing, the Netherlands has 16.8 million inhabitants, whereas the United States has 318 million people!

That’s a huge market!

Displaying Your Website in Multiple Languages with a Plugin

There are several plugins available, such as WPML, PolyLang, and Stella free.

WPML comes at a cost but is the most renowned plugin with extensive support. Many plugins are WPML certified, meaning they work well with WPML. WPML stands for WordPress MultiLangual and has been available online for some time.

You can purchase WPML here.

Below is a screenshot of the simple translation feature within pages and posts.

WPML is highly regarded but comes with a price tag.
(However, as a business, you can write off this expense.)

With WPML installed, you have various features at your disposal. The option you will use most often is the translation capability.

Click the “plus” or “pencil” icon to create or edit a page in another language.

As mentioned, the WPML plugin is flexible, allowing you to customize various aspects. It also works well with many plugins, enabling you to use “string translation” to make certain plugins multilingual.

We have installed WPML for 9 out of 10 clients, and 6 out of 10 of them either already used it or preferred it because they had experience with it elsewhere.

It’s highly recommended, but WPML is not free, and at the time of writing, it costs $39 per year for 1 website or $199 for unlimited websites a year.

A Cost-Effective Solution, Stella!

The Stella plugin, available in both Free and Premium versions, is a more affordable option at $14.99.

We tried the Free version, and if you simply need a plugin to translate your posts or pages, Stella is a good choice.

We purchased the premium version for the modest amount of $14.99 and were able to make some clients happy with it.

You can download Stella here.

Simple Yet Effective

The plugin displays translations on one page, making it easy to switch between languages.

Next, let’s talk about PolyLang.

PolyLang

As you read earlier, we have WPML in use for 9 out of 10 websites, so PolyLang was something we had used a while ago. We installed the latest version to see how it works!

It took a little bit of figuring out, but in the settings, you can choose one or more languages after installation, and they will appear in the pages and posts overview, just like WPML.

You can download Polylang here.

Enjoy!

The above-mentioned plugins are the best ones we know and have found for making WordPress multilingual.

If you know of other plugins or have experience with WPML, PolyLang, or the Stella plugin, feel free to share your thoughts!

What is a Brute Force attack (WordPress basics)?

3 November 2023/0 Comments/in Security

A Brute Force attack can be translated to “een aanval met brute kracht” in Dutch.

In this type of attack, the attacker uses sheer force rather than clever tactics.

A Brute Force attack on WordPress is often executed on the login page.

If you don’t have proper security measures in place, an attack can continue until the attacker successfully breaches your website.
As this attack involves computers, it can be very fast, with thousands of login attempts fired at your login page every minute.

Preventing a Brute Force attack

You can prevent such an attack by securing your WordPress site with a specialized plugin or by hiring our services.

Securing WordPress properly

2 November 2023/0 Comments/in Security

To properly secure WordPress, you need to address multiple points.

Choose a unique username and a long password
Explanation: The username should be unique, not something common like your first name or website name. The password should be at least 8 characters long and can include a combination of uppercase letters, lowercase letters, and numbers. Learn more about the importance of a strong password here.
Ensure your server permissions are set correctly
Explanation: Only the uploads folder and its subfolders should be set to 777/writable, all other folders should be set to 755, and the wp-config.php and .htaccess files should be set to 444. You can check and adjust these permissions using a free FTP program.
Regularly update plugins and WordPress
Explanation: WordPress releases updates regularly, some of which may cause issues with plugins. It’s important to focus on updates that address security issues and enhance security. You can check the “release notes” to see if security issues are being resolved.
Use one good security plugin
Explanation: There are several security plugins available for WordPress. These security plugins are essential to block brute-force attacks, hide the admin area, and protect files and data.