Page 23 – WPBeveiligen

Wix makes attempt to mock WordPress

3 August 2023/0 Comments/in NewsFlash

WordPress is free to use and has an open license, allowing you to use it for any purpose you want. WordPress, therefore, doesn’t have a sales team, doesn’t send invoices, and as far as I know, doesn’t engage in advertising to convince you to use WordPress.

It’s peaceful and non-binding.

It’s a different story with WIX, another CMS for creating websites. With WIX, it’s all about the money, profit. This often leads to the commercial gimmicks you frequently see with companies focused on revenue.

In addition to regular advertising, WIX has taken a peculiar path. They have created ads that mock WordPress, adopting an Apple versus Windows idea.

You can watch one of the ads here: [link to video]

Matt (Founder of WordPress) blogs about it [here](https://ma.tt/2021/04/wix-dirty-tricks/) and gives a little pushback.

Normally, the WordPress landscape is very calm because there is little to no competition since WordPress is free. This is a peculiar turn of events, like a soap opera.

I’m curious to see what the future holds. Although WIX has a small share in the online world and is not a real competitor, it does bring some excitement to the scene.

Secretly, these videos where companies try to one-up each other can be quite entertaining.

Which email service is best?

2 August 2023/0 Comments/in Email

Ask colleagues or friends which email service is the best, and you’ll receive different answers.

Usually, preference is shaped by availability. Which email service was available when you needed it? Think of Outlook, Live Mail, AOL, or Yahoo, which were available in the early years of the internet and are still in use today.

Or perhaps you’ve been using webmail or an email program provided by your web host because you have your own business with your own domain name/website. As a serious entrepreneur, you can’t just use a Live or Outlook account for email, right?

Times change. Let’s first look at the email services available today.

Gmail
Gmail is familiar to many, especially since it comes with every Android smartphone. You need a Google account to use your Android phone, and the Gmail app is often pre-installed.
In recent years, Gmail has become an accepted address for many entrepreneurs and small businesses.
ProtonMail
Huh? What? ProtonMail is an email service based in Switzerland. It offers the added benefit of strict rules/laws regarding data storage and sharing.
In other words, your email is less likely to end up in the hands of governments or authorized individuals.
This is partly because no IP addresses are stored and because the emails are encrypted.
In a time of privacy concerns (and the lack thereof), this might be an interesting choice.
Especially when compared to Gmail, where much is known about its practices.
Microsoft Exchange
Microsoft Exchange is an email service commonly used by businesses. Microsoft servers are heavily monitored and filtered to prevent spam. Microsoft uses a comprehensive system to allow or block emails, and various security protocols are in place.
The learning curve may be slightly steeper than with Gmail or other email services, but as a business, you can get much more out of it.
Webmail – Server mail
This refers to email that is sent and received through your hosting provider or via your website.
You have your own email box on your web package, you can create custom email addresses (as long as they end with your website address), and in some cases, you can set up filters and rules. This option has its advantages, but you need to have a bit more knowledge compared to Gmail, where everything is taken care of for you.
ISP mail – Your internet service provider
Various internet services also offer email services. Think of providers like Ziggo, Delta, KPN.
In many cases, this service is free, and you can choose an email address or get one automatically with your internet subscription. Convenient! But keep in mind that an ISP has access to a lot of your information, including your address and IP address. There have been legal cases and rulings in the past stating that “a provider reading email without the user’s permission is not illegal.”

Which email service is the best?

We can’t determine that for you 😉
We’ve listed a few options for you, and now it’s up to you to decide which one YOU prefer.

Now that you know, you can consider the following:

Where is the email stored, and who can access it? (Server administrators, Google?)
Do I want
my email to be encrypted? (ProtonMail)
Do I want a professional email address or an address ending with Gmail, KPNmail, etc.?
Is email crucial for my business, and do I need to ensure its delivery? (Microsoft Exchange)

Additional Information

Webmail (via the browser)
Almost every service has a web version, which means you can access your email through a browser. This is convenient when you don’t have your laptop or smartphone with you.

Emailing with a program
Almost every email service allows you to send and receive email through a program, also known as an email client. You’ll need the POP/IMAP and SMTP settings, along with your email address and password.

Security
If privacy and security are crucial to you, pay attention to multiple factors.
Ensure that your emails are encrypted, that you use HTTP/SSL for sending emails, that your browser or email program doesn’t share data, that your ISP and/or web host cannot access or view your data, and that the receiving party also meets these requirements.

Does FSE have the future? A test with WordPress Full Site Editing

1 August 2023/0 Comments/in Featured, Featured Newspage, Gutenberg, Themes

What if you could style not only the content but the entire website using Gutenberg?

With Full Site Editing (FSE), which stands for Full Site Editing, this may be possible in WordPress 5.8.

I have been testing FSE with the beta theme called TT1 Blocks and the latest Gutenberg release to see if it is truly convenient.

Full Site Editing Beta test

I have installed the experimental theme called TT1 Blocks.
This TT1 Blocks theme is a variation of the default WordPress 2021 theme called Twenty Twenty-One.

With this TT1 Blocks theme, I can see if it is possible to create a “professional sample website” without using any other editor or theme builder.

You can edit both the content, header, and footer in the same way! No additional theme plugin, child theme, or settings page is required.

Ps: At the time of writing, the TT1 Blocks theme is still in development, which is why the build number is still 0.4.5. There will be changes in the final theme and the functioning of FSE and Gutenberg.

My current experience with the experimental theme and Gutenberg

I spent 20 minutes playing around with the theme to see if I can work with it.
I have only been using Gutenberg for 1 hour because I usually work with the Visual builder, Enfold builder, on other sites.

A fun test to see if Full Site Editing with Gutenberg is easy to use and has potential, right?

A deep dive into FSE

I dive right in and create a homepage. In my imagination, I should be able to modify both the content and the header and footer. But that’s not the case.

I see a new button at the top in the black bar, Customize Site.

Now I can customize the header and footer using blocks and the standard Gutenberg editor.

Okay, we can design the site.

I envision a website with a “professional look.”
I go for a dark red header, not too tall, and a footer with a gray background. The overall page background should be predictably white or very light gray.

Let’s see if I can achieve that!

The header

Adjust color – CHECK

Modify title and slogan – CHECK

Adjust header height – FAIL

Even though I set the padding/spacing to 10px and removed any space blocks in the header, it is still three times taller than desired due to empty space.

The column height in the header
It appears that the logo and slogan are contained within a column. At the time of writing, the column height is not adjustable.

With some CSS, it is possible to adjust it by adding a class name to the column, setting the height, giving the h1 a margin of -100, and so on.

But we don’t want to do that; we shouldn’t have to code!

Changing the H1 to a Paragraph doesn’t help much either; in fact, it makes the column even taller.

EPIC FAIL!

Tip: Don’t dwell too long on something that isn’t working, move on and come back to it later.

The content

Inserting content is a breeze. Adding a photo, text next to it, adjusting with the so-called “spacers.”

Ps: I’m not saying this is the easiest way to create content. But Gutenberg works in general and is used by many 😉

Styling the footer

Similar to the header, changing the color is easy, and being old-fashioned, I also want to add a widget, which is straightforward. GREAT!

WordPress and FSE: 1-0

Adjusting the page background

The page background is still light green, the (awful) default color of the theme.
The theme currently does not have a separate settings page where this can be modified. That is likely to remain the case as we move towards Full Site Editing with Gutenberg.

I’m using the CSS Customizer to adjust the body color (Go to your admin panel, navigate to Themes, click on the current theme, and then click the blue “Customizer” button).

Result

I added some CSS, but ultimately, I managed to create a sample website that resembles what I had in mind. – Well, approximately, given the short timeframe of 1 to 2.5 hours that I wanted to dedicate to using Gutenberg in combination with the new FSE features.

Using FSE already?

No! Currently, in April 2021, FSE is still in beta. The official version is yet to be released, and many changes still need to be made.

When FSE is officially launched, you can take a look, but I recommend waiting for another 2-3 months even then. Often, some necessary updates are made when something is widely used. Consider compatibility with certain plugins, widgets, alignment, etc. There are probably still some minor bugs that WordPress will address in the months following the official release, as was the case with Gutenberg when it was officially introduced into WordPress.

Final Verdict: Does FSE have a future?

Absolutely! We know that Automattic (the company behind WordPress) closely collaborates with WordPress users. It is highly likely that the theme or the Gutenberg editor will have the missing functionalities in the official release.

Why FSE?

You can easily make various adjustments such as color without having to search for a theme editor or theme settings.
You can easily add and rearrange elements in the header and footer.
The base theme is well-supported and maintained by WordPress itself and is free, unlike premium themes.
Fewer plugins are needed to achieve what you want.

Contrary to expectations!
I am not yet a fan of Gutenberg, but this works quite well and is simple. Once you can manage the blocks, you can basically do anything.

Note: Designing is a separate skill, and technical knowledge and experience are still required to create a website.

The importance of a good domain name

31 July 2023/0 Comments/in Domain names

When starting a business, it can be challenging to come up with a good company name.

But when you’re brainstorming a company name, do you also consider your domain name? Usually not, right? However, choosing a good company name and domain name is crucial for the success of your business.

If you choose the wrong domain name, it can be a hassle to change it later without damaging your brand and search position. Switching domain names can result in losing visitors, which are customers you desperately need when starting a business!

That’s why it’s important to choose the best domain name that works for your business and aligns with it from the beginning.

A domain name is your business address

The domain name is an address that you’ll often share.
Need more information? Take a look at the website.
Want to make a purchase? Check out my online store.
Want to get in touch with me? You can easily do so through my website.

The impression of a domain name

Your domain name is the first thing visitors will see when you hand them a business card, when you talk about your company and they want more information. A good domain name can create a positive and lasting impression, while a bad domain name can lead visitors to mistype your website, quickly forget it, or form a wrong impression of you or your services.

Your domain name in Google

The domain name also has an impact on SEO, or your search position in Google. Although an exact match with your company name is no longer a necessity, having relevant keywords in your domain name can help you rank higher in Google.

Choosing a domain name – 10 things to look out for

30 July 2023/0 Comments/in Domain names

There are several factors to consider when choosing a domain name. Here are 10 important points with explanations:

Use the appropriate extension (.nl, .com, .org)
If you operate in the Netherlands, NL is the most commonly used domain extension. Use COM if you want to do international business. ORG is less frequently used, but if you have a large organization or your desired domain name is not available with .nl, you can consider .org.
Use niche or specific keywords in your search for the right domain name
This is especially important if you want to rank in Google and attract the right customers. Instead of using generic names like “websites,” add a location or other accompanying word. Think of “websites amsterdam” or “WordPress websites.” Or even more specific, like “affordable WordPress websites.”
The accompanying word will help you rank higher in search results when people search for it. This way, you won’t be competing against thousands of other websites that already have the keyword in their domain name.
Choose the shortest possible domain name
A domain name should be easy to type and remember. It is recommended to have a maximum of two words. People won’t remember more than that.
Choose a domain name that is easy to type, spell, and pronounceThere are several factors to consider when choosing a domain name. Here are 10 important points with explanations:
1. Use the appropriate extension (.nl, .com, .org)
  If you operate in the Netherlands, NL is the most commonly used domain extension. Use COM if you want to do international business. ORG is less frequently used, but if you have a large organization or your desired domain name is not available with .nl, you can consider .org.
2. Use niche or specific keywords in your search for the right domain name
  This is especially important if you want to rank in Google and attract the right customers. Instead of using generic names like “websites,” add a location or other accompanying word. Think of “websites amsterdam” or “WordPress websites.” Or even more specific, like “affordable WordPress websites.”
  The accompanying word will help you rank higher in search results when people search for it. This way, you won’t be competing against thousands of other websites that already have the keyword in their domain name.
3. Choose the shortest possible domain name
  A domain name should be easy to type and remember. It is recommended to have a maximum of two words. People won’t remember more than that.
4. Choose a domain name that is easy to type, spell, and pronounce
  If you do business in the Netherlands, make sure you have a Dutch name. Choose a domain name that doesn’t have multiple meanings and can be spelled in different ways. When you tell someone the domain name, they shouldn’t have to ask, “How do you spell that?” or repeat it three times.
5. Choose a unique, catchy, and memorable domain name
  Keep it short and specific, but test your domain name by telling it to someone you know and ask them a week later if they still remember it. Do this test with 10-20 people, as some may be less interested when you mention something and therefore forget it 😉
6. Avoid double letters, hyphens, and numbers in the domain name
  A hyphen in the domain name is often used when the original domain name is already taken. It creates confusion to use hyphens and numbers, both in writing and when pronounced. So, it’s best to avoid them!
7. Think long-term instead of short-term: leave room for expansion
  If your domain name is too specific, such as “Pietsfriet” (Piets fries), it can limit your business growth or your service and product possibilities. Try selling bananas under the name “Pietsfriet” 😉
8. Act quickly before someone else registers the domain name
  If you have registered a company name with the Chamber of Commerce (KvK) and you have told others about your company, including the name, don’t wait too long to register the domain name. Anyone can register a domain name, even your competitor or someone who thinks the name is brilliant! And yes, this does happen!
9. Check if the domain name is not a trademark or already in use
  There are thousands of names in use, so make sure the name you want to use is not being used in the same country where you conduct business. If the domain name resembles a company’s name or is
  
  part of a company name, you may receive a letter requesting the transfer of the domain name. And that would be a waste of your time.
10. Check your domain name in Google Translate and Google
  Especially with short domain names, there is a risk that the domain name is a swear word in another language or part of a word you would rather not use. It could also sound like a word you would rather not pronounce.
anings and can be spelled in different ways. When you tell someone the domain name, they shouldn’t have to ask, “How do you spell that?” or repeat it three times.
Choose a unique, catchy, and memorable domain name
Keep it short and specific, but test your domain name by telling it to someone you know and ask them a week later if they still remember it. Do this test with 10-20 people, as some may be less interested when you mention something and therefore forget it 😉
Avoid double letters, hyphens, and numbers in the domain name
A hyphen in the domain name is often used when the original domain name is already taken. It creates confusion to use hyphens and numbers, both in writing and when pronounced. So, it’s best to avoid them!
Think long-term instead of short-term: leave room for expansion
If your domain name is too specific, such as “Pietsfriet” (Piets fries), it can limit your business growth or your service and product possibilities. Try selling bananas under the name “Pietsfriet” 😉
Act quickly before someone else registers the domain name
If you have registered a company name with the Chamber of Commerce (KvK) and you have told others about your company, including the name, don’t wait too long to register the domain name. Anyone can register a domain name, even your competitor or someone who thinks the name is brilliant! And yes, this does happen!
Check if the domain name is not a trademark or already in use
There are thousands of names in use, so make sure the name you want to use is not being used in the same country where you conduct business. If the domain name resembles a company’s name or is

part of a company name, you may receive a letter requesting the transfer of the domain name. And that would be a waste of your time.
Check your domain name in Google Translate and Google
Especially with short domain names, there is a risk that the domain name is a swear word in another language or part of a word you would rather not use. It could also sound like a word you would rather not pronounce.

What domain extension should I choose?

29 July 2023/0 Comments/in Domain names

When choosing a domain name extension, one thing is certain: for a Dutch website, “.nl” is still the best extension.

A .com domain name

If the domain name you want is already taken, consider a ‘.com’ extension. Why .com? Well, “.com” is the most well-known and easiest to remember. According to research, 43% of all domains have the “.com” extension.

Although there are many successful websites with a “.net” or “.org” extension, your website is likely to perform better if it has a “.nl” or “.com” extension. It is the safest choice.

Our advice

Our advice: Go for .nl or .com. If both are already taken, then try .net or .org. If those are also taken, it’s better to consider a new domain name.

Avoid unusual extensions

Avoid unusual extensions like “.club”, “.space”, “.pizza”, etc.

Registering multiple extensions?

You may want to prevent a competitor from registering the .NET or .COM version of your domain name.

In the case of large companies, it is common for other popular extensions to be registered. If you have a large company and can afford the additional annual costs of a few tens of euros, it’s an option to also register .net and .com so that others can’t do it.

Why would someone register a .COM version of your domain name?
Individuals or companies do this to capture visitors who mistakenly type your domain name with that extension.
In some cases, they do this to create an advertising page, a landing page that they promote on Google.

Registering a domain name and forwarding
In that case, you can choose to register those domain names and forward them to your website. This is called a “forwarder.” In many cases, your web host can handle this for you, or you can set up a forwarder in the domain name settings with your web host.

Fraud & fake registrations

There are various “companies” that alert you to the fact that someone is going to buy the .com version of your domain. They give you the opportunity to quickly purchase the .com version from them!
These are often fraudulent emails.

Why?

If someone wants to buy .com, they will simply do so. These fraudulent companies that “alert” you are aiming to register the domain name for a much higher price.
They charge 5 to 10 times more than the original price!!

Do not respond to those emails or verify the authenticity of the situation.

What is a website server?

28 July 2023/0 Comments/in The base

A server is an extremely fast computer that “serves” your website when someone visits your domain name.

Servers are typically located in data centers, which are hi-tech buildings with secure rooms and fast internet connections.
The building is divided into enclosed spaces where sensors ensure that the temperature, humidity, and airflow are optimal for the server to perform well. This results in a more stable server, which is important for website uptime.

Why are websites hosted on servers?

As mentioned, it provides a secure environment to store your website. The internet connection is fast enough to load thousands of websites.

You “can” serve a website from a single computer, but this is not cost-effective, nor is it very secure or stable.

Are all servers the same?

No, there are differences in the technology used by servers. The configuration can also vary. Therefore, it cannot be assumed that your website is hosted on the best and fastest server.

Can I buy my own server?

Yes, you can. However, keep in mind that you will have maintenance, licensing costs, and many other expenses, resulting in initial costs of 1500+ euros, not to mention monthly costs. That’s why 99.9% of all website owners choose a hosting provider that has servers in a data center.

Choose a good hosting provider

Currently, we are in contact with a very fast hosting provider.
They use the latest technologies, both in terms of software and hardware (the server itself).

An important aspect for a fast website is also the number of websites hosted on a server. If there are too many, the sites can still be slow. This often happens with budget hosts.

The hosting provider we recommend prioritizes the speed of your website and therefore hosts only a few websites per server.

Do you want an extremely fast website?

Then choose our hosting provider.

How does WPbeveiligen find a hack or backdoor?

27 July 2023/0 Comments/in Solutions

Finding a hack file or backdoor among the 1500 to 3500 files that typically power a WordPress website may seem impossible.

Searching for a needle in a haystack

When your website contains vulnerabilities that allow bots to upload files to your server, they prefer to spread those files as inconspicuously as possible. They may target upload directories that are several levels deep from the root.

Hack files are often placed in PHP format among your other files, using different filenames and tricks each time. This requires knowledge and experience to locate these files.

I can give you some tips on how I do it, but my other tips will remain “trade secrets.”

Method 1 – Finding hack files by modification & creation date

Files added via a bot often have a different timestamp than the rest of your files. In 99% of cases, they are added after the start of your website. As your website becomes more popular, the chances of it being found by bots that deploy harmful files increase. Pay attention to the modification or creation date.

Method 2 – What doesn’t belong in WordPress?

Spot the differences. I can recall about 80% of all the files that should be in WordPress. So, when I see an options.php, model.php, or 312.php where it shouldn’t be, I know there’s an issue, and I check the code before pressing delete.

Method 3 – Scanning the code in the files

I have various scanning methods that can automatically or manually inspect multiple files simultaneously. With these scans, I search for:

frames
base64
eval
cookie
inject
p.a.c.k.e.d
display: none / visibility: hidden
And more

Method 4 – Searching in the database

Using a program and the usual server tools, I search the MySQL database for backdoors, unauthorized users, hidden content, and more.

Method 5 – Google Webmaster Tools

Google Webmaster Tools often alerts you first when a website contains malware and phishing files. Valuable information can be obtained from there to help tackle the hack.

These are some of the methods I use. There are many more, and each website requires its unique approach to find a hack. Websites with more than 10 plugins may require checks in unexpected places. Old server software or open servers may require different approaches.

In general, websites are thoroughly examined and evaluated first, followed by increasingly refined searches to identify and remove all threats, ultimately securing the website.

Note: Removing a spam script, malware syntax, or frame is just the beginning. The ultimate goal is to patch the vulnerability and secure the website.

W3 Total Cache leaked again

27 July 2023/0 Comments/in NewsFlash

W3 Total Cache is a plugin that helps improve website loading speed. One would expect that nothing can go wrong with it. However, as of mid-2021, there have already been 3 vulnerabilities found in W3 Total Cache.

The plugin had multiple vulnerabilities in 2019, and in 2016, a staggering 8!! vulnerabilities were discovered.

For us, this is a reason to avoid using this plugin on WordPress websites.

In the past, these vulnerabilities allowed hackers to place files on the server, read usernames and hashes, and execute commands on the server.

You simply don’t want to take that risk with a business website, so it’s best to avoid using this plugin or replace it with Autoptimize or WP Rocket.

Autoptimize – created by someone in Belgium – is a free cache plugin that has only had 5 vulnerabilities registered, compared to over 20+ vulnerabilities in W3 Total Cache.

If you want to be completely secure, according to WPScan – an authority on security issues – WP Rocket has only had 1 vulnerability (at the time of writing). However, this is a premium plugin that requires annual payment.

Remember that you need to properly configure any of the mentioned plugins to effectively speed up your website.

And no, using two cache plugins doesn’t make your website twice as fast 😉

Using the DEBUG MODE of WordPress

26 July 2023/0 Comments/in Featured, Solutions

What is the debug mode?
The debug mode is a feature that is included in WordPress by default and is turned off by default.
You can turn on the debug mode if you want to display errors on the front end of your website.

The debug mode is mainly used by developers.

Enabling the debug mode

You can enable the debug mode by using a text editor to open the wp-config.php file.

Open the wp-config file and find the following line of code:
define( 'WP_DEBUG', false );

To enable the debug mode, change FALSE to TRUE.
(Casing doesn’t matter.)

By default, the debug mode is set to FALSE. This is done for security reasons. Remember to set the debug mode back to FALSE after resolving the errors!
Errors can reveal information about your website that not everyone should see. Hackers and malicious scripts, in particular, should not have access to error messages.

Saving errors

You can also save the errors so that you can review them later. WordPress has a built-in feature called the Debug Log, which is already present in WordPress but needs to be activated.

To activate it, add the following line of code below the previously mentioned debug mode line in your wp-config.php file:

define( 'WP_DEBUG_LOG', true );

WordPress will now save ALL errors that occur on visited pages in a file called debug.log, which can be found in the wp-content directory.

If you want to view the errors in the log file, you need to visit the pages where the errors occur.

And if you suddenly see hundreds of errors, don’t panic. If you have many website visitors, all those errors will also be logged every time a page with errors is loaded. So it could be just “one simple error” that you need to address, but it appears multiple times in the log file.

Whether you want to view the errors directly on the respective page or through a log file, it’s possible! Now, you just need to resolve the error.