Sales: 0800 321 3812
Support: 0845 680 3812

Posts Tagged ‘WordPress’

Who controls your website?

by: Chris Hudson
23 August, 2010

Last week Computer Weekly reported on a worrying state of affairs amongst UK SMEs and their lack of control over their web presence. Do any of these apply to your business?

  • More than half of SMEs cannot make their own changes to their website
  • Two-thirds lack the contact details of their hosting company
  • Two-thirds do not have the passwords for their hosting account
  • Nearly three-quarters have not registered all their domain names in the name of the business owner

Most UK businesses do not have the in-house skills to create and host their own website and so it is natural that they should outsource this process. However, it is becoming clear that many businesses have let their lack of understanding of the process interfere with their control over their web presence.

Problems that can arise from these situations:

  • Unable to make your own changes means that you may be paying up to £50 an hour for simple changes to the text on your website.
  • Understandably, many companies baulk at paying to amend a website and so it’s site becomes increasingly out of date and irrelevant. It may even harm the business if it seems to be lacking in awareness of new developments in its market.
  • If you cannot contact the hosting company what do you do if you check the Internet and your website doesn’t appear? “error www.yourpreciousdomain.com cannot be found”. Remember, your customers are seeing that message too.
  • Even if you have some employees who are Internet savvy they cannot help your company website if do not have the username or password for the hosting account.
  • If a domain name is not registered in the owner’s name then there is no proof that they own the domain. It means it (and your email of course) can be controlled by the person in whose name it was registered… perhaps a now, disgruntled, ex-employee, a former business partner or even an angry ex-spouse! Many businesses discover their domain name is registered to the web designer who created their first website, a practice that has thankfully become rarer in recent years.

That last point brings us to the problems that can arise where the inexperienced SME owner left the “web thingy” in the hands of the confident local web designer who offered the “complete service”. He did the design, development, implementation, uploaded the pages, provides the hosting and maintains the domain name.

For many SMEs this type of services proves to be a godsend and enables them to get their enterprise online with the minimum of fuss and at a reasonable price. But does the phrase “all your eggs in one basket” ring a bell?

From the point of view of the SME, its online presence has a SPOF - a single point of failure - the web designer. What if he drops dead tomorrow? How long would it take to get control of your domain if it’s in his name? What happens to your web site in the mean time. Will the website still be hosted if he is not there to maintain the server or pay the contract with his hosting supplier? The problems are easily imagineable.

The solution? Well both SME owners and managers have to seize back control of their websites. The complexity of this will vary from SME to SME and the circumstances surrounding their exisiting web set-up.

  • Contact the designer and have a friendly chat, determine the answer to the questions raised above e.g. in whose name the domain is registered; ask about backup and emergency plans in the case of his illness or holiday.
  • Get the web site username and passwords, and ensure the info can be found in an emergency.
  • Transfer your domain into the business owner’s name - we at Intrahost are happy to help our customer’s do this - which means if all else fails you can point the domain’s DNS (Domain Name Servers) to a new hosting company and get your website back online in an emergency.
  • Get a backup of your website saved regularly so you can upload it to a new host (see above) if necessary.

The best way to enable an SME to make minor alterations to a website, where they lack the in-house coding skills, is to either have the website moved to a CMS (content management system), like Joomla! or to attach a blog to the site (using WordPress) - both of which allow the relatively unskilled to make regular changes to the content of a web site - and the changes be free of charge and timely.

Is your WordPress blog food for worms?

by: Chris Hudson
5 September, 2009

Is your WordPress blog running on the latest version of the self-hosted blog software?

If not your blog could quickly become food for worms - well, one worm in particular that is doing the rounds of out-of-date, unpatched WordPress blogs.

This worm exploits a security bug that allows evaluated code to be executed through the permalink structure, makes itself an admin user, then uses JavaScript to hide itself so you can’t see it if you look at the users page - it also attempts to clean up after itself and finally inserts hidden spam and malware into your old posts.

The danger of a worm like this is that your website could be banned from Google for hosting malware or being used for spamming.

The cure is a simple one, thankfully, just make sure you are running the latest version of WordPress, 2.8.4

In fact, the security vulnerability was fixed in the previous release, so you can get away with running 2.8.3.
But upgrading WordPress has been made simpler over the versions and now it really is a “one-click fix”.

As a hosting company we promote this type of news as we believe this simple upgrading is part of being a good ‘virtual’ neighbour to other users on shared web servers. If you allow your blog to be breached by this worm and be banned from Google, then other customers who share your web server (and its IP address) could also find their websites removed from Google’s index - guilt by association!

So please take a few seconds to check that your WordPress blog software is 2.8.3 or higher - and hope that your virtual neighbours are doing the same!

WordPress 2.8.2 available

by: Chris Hudson
22 July, 2009

WordPress version 2.8.2 upgrade is now available; it is a security release to fix a XSS vulnerability.

Comment author URLs were not fully sanitised when displayed in the admin which could be exploited to redirect you away from the admin to another site.

To upgrade either download version 2.8.2 or automatically upgrade from the Tools->Upgrade page of your WordPress blog’s admin area.

WordPress 2.8.1 beta upgrade is available

by: Chris Hudson
23 June, 2009

Many Intrahost clients use their web hosting account to run a blog - usually based on WordPress and last week saw the release of a major update, version 2.8.

Now, if you updated last week to the latest version of Wordpress you may be aware of a few bugs kicking around; problems with themes, the dashboard, incomplete page loads and the automatic upgrade!

You’ll be pleased to now that the WordpPress developers have taken their first steps towards fixing these bugs with the release of WordPress 2.8.1 beta.

Download WordPress 2.8.1 beta

Here are a few of the bugs fixed so far

  • Many themes were calling get_categories() in such a way that the command failed under 2.8.  Now 2.8.1 works around this no changes are necessary to these themes
  • Users were running out of memory when loading the dashboard, resulting in an incomplete page. So Dashboard memory usage has been reduced.
  • Thankfully the automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade!
  • The rich text editor will now load, avoiding compression issues.

To automatically upgrade from 2.8 to 2.8.1 Beta 1, follow these instructions.

WordPress can be automatically installed by Intrahost clients who are using the Fantastico add-on that comes as part of the cPanel control panel on their Linux based web hosting account.