Posts Tagged ‘themes’

Free WordPress Theme – One Night in Paris

onenightinparis free wordpress theme 155x300 Free WordPress Theme   One Night in Paris imageThis is a complete edit of my earlier One Night in Paris theme for WordPress, I build the original theme over a year ago and have spent a lot of hours improving my skills since then, so here’s my latest free WordPress theme release for everybody to download and enjoy.

The theme features a rich, three column layout for the homepage and a large single column for content within the website. I’ve purposely left formating to a minimum on this theme to allow web designers to rapidly introduce their own creative elements to the theme and make changes.

You can preview the theme live here on thisismyurl.com or download and enjoy the theme free of charge on your own website.

Free Community Friendly Theme

free wordpress theme

Well it’s been a little while since I uploaded a new theme but as before, this one is fully optimized and ready to help you community or non-profit group show up in the Google rankings.

The theme design has been created as a basic, no thrills piece which can be easily added upon for most community groups, churches and non-profit organizations which are seeking an easy way to  get their website online.

I’ve included a lot of Search Engine Optimization tricks in this theme by default.

Some Minor Plugin Maintenance

I’ve been fairly hard at work this week but I found a bit of time to do some maintenance on a couple more plugins I’ve build for WordPress. 

No More Frames

I’ve fixed a minor bug with Safari, updated the documentation and added a new admin panel.

Autocopyright Notice

The new admin menu is operational, and I’ve updated the documentation. 

PHPinfo()

The new admin menu is operational, and I’ve updated the documentation. You can now also call the function from within your themes.

WP Stats Smiley Face Remover

A quick fix to add an admin menu and updates to the documentation.

I’m working on rebuilding the thermometer plugin for WordPress at the moment, so please expect to see an update within the week.

10 of the Sexiest Web Headers on the Planet

thou shall blog 10 of the Sexiest Web Headers on the Planet image

What makes one website stunning while another is bland? The header of course! Visually speaking it’s one of the most important elements of a website, so let’s take a look at ten sexy blog headers to see what they’re doing right (and what you’re doing wrong?).

How to Secure Your WordPress Website

Running a WordPress website is one of the easiest ways to run a high quality, free web site content management engine but since there are millions of other websites running the same software, there are lots of bad guys out there who would like nothing more than to break into your website. So how do you stop them? In this article I’ll examine some processes your blog should implement to ensure it’s more secure than the ‘out of the box’ version of WordPress.

Basic Security

Plugin Directory

Step One of any WordPress security installation is to hide the contents of the plugin directory. By default, WordPress ships with the directory exposed (it can be found by typing http://[yourwebsite]/wp-content/plugins/) but this allows the bad guys to see what plugins you’re running and possibly take advantage of them. To solve this, simply upload an empty file named index.html or index.php into the base plugin directory.  Another very easy way to do this for your entire WordPress site is to simply add Options -indexes to your .htaccess file. This tells your web server to never list directory contents.

Quick Note: .htaccess files are funny things, they don’t have a filename in the traditional sense so when you download them, all you download is the extension (filename.extension). This can make working with them tough. What I like to do is rename the file -.htaccess or something similar before downloading it, which allows Windows computers to properly interact with the file.

Limit Access to the Admin

Step Two of the basic plan of attack is to limit access to your administration tool. An .htaccess file is a server level control file, meaning that it interacts with the web server before it interacts with a web browser, what we want to do is limit the IP addresses of computers to your wp-admin directory. Need a more basic explanation? Each computer on the internet has a unique Internet Protocol (IP) address made up of four numbers ranging from 0 to 256 for example, 123.456.123.456 this number reflects your unique signature on the Internet. What we want to do is control which computers can access your account.

To do this, first we need to know what your IP address is. Luckily there’s a website for that at http://whatismyipaddress.com/ which will tell you what your current IP address is. After you have that, create a new file called .htaccess on your desktop and add the following code to it:

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName “Access Control”
AuthType Basic
order deny,allow
deny from all
allow from [paste your IP address here]

Once you upload that code to your wp-admin directory only computers from the IP address you specified will be able to access your WordPress admin directory. You can add multiple allow from lines to ensure you can access your site from work or home. If you ever need to access your admin panel from outside the IP range, simply comment (place a # symbol) before the deny from all line and you’ll be able to access it normally.

One final note here, since many people have dynamic IP addresses (they change whenever you reboot your internet connection) you might want to check with your Internet Service Provider to determine their IP range. For example, once you know that your IP address is always 142.167.66.[0- 255] you can use the allow from address of 142.167.66.* so anybody in your local subnet group (the last octal) can access your admin directory. A little less secure but still better than allowing the whole world to access it.

An Extra Level of Password Control

password protect directory 300x199 How to Secure Your WordPress Website imageJust like the .htaccess file can be used to limit access from specific IP addresses it can also be used to force a server level username and password check before prompting you to input your WordPress username and password. You can do this fairly easily if you’re hosting with BlueHost or if you’re using another hosting company you can create a secure login using an .htaccess file and .htpasswd files or the AskApache Password Protect plugin. This process is a little more complex but a great extra layer of security.

Change Your Admin Account

By default the most powerful account on your WordPress website is called admin, since everybody in the world knows this they only need to guess your password but if you change the admin account name, you make guessing both your username and password infinitely harder. One other point here, since your password is case sensitive (A and a are different letters) you should always use long, complex passwords that mix uppercase and lowercase letters, at least one number and if possible a symbol such as an ampersand (&) or dollar sign. The more complex you make your password, the less chance somebody will guess it.

WordPress Version

Some WordPress themes include a line such as <meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />  in the header.php file. While this is great for WordPress it’s a security blunder since you’re announcing to the world which version of WordPress your using and if it’s not the most recent … which security holes your website is vulnerable to. Simply remove this line from your header and you’ll be more secure.

 

WordPress displaying security issues

WordPress displaying security issues

The next step when it comes to security with regards to versions is to always upgrade to the most recent version promptly. I recommend upgrading your website (and your plugins) as quickly as possible after a new release has been updated.  You’ll see from the graphic to the right that my hotel web design company Getaway Graphics hasn’t had some of it’s plugins or base code upgraded in weeks, this is a major security flaw which could lead to hackers gaining access to my files. Luckily, I did this to demonstrate the potential flaws and the site is actually perfectly safe.

Always upgrade your website and your plugins to the most recent version after you have done a backup of your site files and data. As a bit of shameless self promotion, let me pipe in here that for a fairly reasonable fee, I can do this for you on a monthly schedule or train you how to maintain and monitor your website.

Secure Your .htaccess file

I think we’re now all aware how powerful the .htaccess file is correct? Great, so let’s secure it simply by adding the following code to the very bottom of the file:

<Files wp-config.php>
Order Deny,Allow
Deny from All
</Files>

This simple piece of code makes it impossible for people to see all the security customizations you’ve done to your blog.

Report Issues

WordPress is, at it’s heart a community project. If there’s something wrong and you discover it, send a bug report immediately so the team can fix security holes. This will make the software more secure both for you and the rest of the WordPress users.

Security Plugins for WordPress

Beyond the common sense security steps outlined above, there are several plugins related to security which every WordPress website should be running:

 

  • Login Lockdown – records failed attempts to access your WordPress admin panel. Frankly, if you don’t know people are knocking on your door … how do you know to protect it?
  • WP Security Scan – tests your website for common security holes.
  • WP Database Backup – backs up the content of your database regularly. Not really a security tool but it will allow you to restore to a previous version if you ever need to.
  • AskApache Password Protect – add a password to your wp-admin directory.

 

Other Great Sources

While I was putting together this article, I had help from some other sources on the net including:

One Final Note …

wordpress How to Secure Your WordPress Website imageThe steps I’ve outlined in the above article are all fairly straight forward and necessary to ensure a strong, safe WordPress blog but I appreciate some people simply lack the technical confidence to perform the steps effectively. I’m available as a WordPress consultant and can generally perform all the necessary upgrades to your WordPress website quickly, effectively and easily so why not give me a call?

Free Premium Magazine Theme for WordPress

My very good friend Chris Bavota just uploaded an amazing new theme for WordPress on bavotasan.com, for those of you who don’t know cb’s work he’s an ex film maker / horror movie nut turned web developer a few years back and he brings an amazing skill set to every project he works on.  Chris also happens to be my partner on a lot of web projects over at Tinker Priest Media and is located in Montreal Canada.

magazine basic theme for wordpress 300x300 Free Premium Magazine Theme for WordPress image

His theme is a clean, nice looking magazine format for WordPress but what really makes it great is the backend which allows users to reformat the theme’s forward facing pages instantly, without having to worry about knowing any HTML. As you can see in the example to the right, the website can be reordered at the click of a button to change the full experience for users.

Take a look at let him know what you think, there’s a demo online as well as a ZIP to download.

Free WordPress Theme – Pink Flowers

Pink Flower Theme

Pink Flower Theme

I’ve just wrapped up another free WordPress theme for you guys, it’s a clean and simple traditional blog theme using a lot of pink. Some people have previously commented that some of my themes are a little bit less manly than they could be but there’s a reason I choose to do these themes in pinks and blues … because there are not a lot of themes out there in pink and blue.  

As with all my themes, this one is setup to be Search Engine Optimized and makes use of proper title tags, document hierarchy and W3C compatible xHTML / CSS so even if you don’t know a thing about making cool websites, this theme is already designed for you.

Speaking of design, a special thanks to designious.com for creating the awesome flower pattern and to Smashing Magazine for making it available for free.

One other note, this theme makes use of my really cool WordPress technique for showing both icons and text in your WordPress links.

The theme is 100% free, I designed it with an ad on the left hand sidebar but you can easily remove it in the sidebar.php file (it’s even commented) all that I ask is that you don’t change the footer, but even that’s optional. If you’re using it, I’d love to hear from you.

How to make a website look good in multiple browsers.

As some of you may have noticed over the past day or so I’ve updated the theme for thisismyurl.com, this has changed the overall look for the site but it’s also lead to a couple of interesting questions from some of you. As an example, one of my testers came back to me with a couple of screen shots and asked why the Shameless Self Promotion box to the right looked different in Safari vs. FireFox.

shameless both How to make a website look good in multiple browsers. image

The answer of course is that each web browser, while programmed to display the same content chooses how to display that content differently. When a web developer designs a website, the first thing that they must do is decide upon a starting point and work outward from there, correcting issues as they appear. In my case, the first thing that I do is program a website for Safari on the Macintosh and then after I have everything appearing exactly as I want it in the first browser, I test it in the next.

In my case, this is the order I build for:

  1. Safari for Macintosh
  2. Safari for Windows
  3. FireFox for Mactinosh
  4. FireFox for Windows
  5. Internet Explorer 6 for Windows
  6. Internet Explorer 7 for Windows
Now … some of you will point out that it’s a strange oder, considering first that Windows makes up more that 80% of the market and that Internet Explorer accounts for 50% of the traffic but to that I would respond you’re correct. However, I would also make a point of saying Safari is the most W3C compliant and, it happens to be what I use on my MacBook.  Building for one platform first means exactly that, I build for one set of rules first and then ensure the design is migrated to each of the other platforms only after I am happy with the changes to the first.
When you’re doing this, always remember to check that the edits you’ve done for later browsers does not have a negative effect on your earlier browsers. In my example above, for Apple Safari I used the following code to create my Shameless Self Promotion effect:
<div id=’shamelessselfpromotion’>
        <p><strong>Shameless Self Promotion</strong></p>
        <p>I’m a <a href=”http://www.thisismyurl.com/services/”>freelance web designer, web master and developer</a>. I build business solutions for the internet, consult on WordPress projects and help build better websites. If you’re looking for a helping hand, <a href=”http://www.thisismyurl.com/about/contact/”>send me a message.</a></p>
</div>
#sidebar #shamelessselfpromotion {
background-image: url(images/chrisross.jpg);
background-repeat: no-repeat;
background-position: 55px right;
padding: 0px 150px 0px 0px;
}
After viewing it in FireFox however, I had to edit the HTML and CSS to look like this:
<div id=’shamelessselfpromotion’>
        <p><strong>Shameless Self Promotion</strong></p>
        <p><img class=’alignleft’ src=’

http://www.thisismyurl.com/wp-content/themes/thisismyurl/images/chrisross.jpg

‘ alt=’Christopher Ross’ title=’Christopher Ross’/>I’m a <a href=”http://www.thisismyurl.com/services/”>freelance web designer, web master and developer</a>. I build business solutions for the internet, consult on WordPress projects and help build better websites. If you’re looking for a helping hand, <a href=”http://www.thisismyurl.com/about/contact/”>send me a message.</a></p>
</div>
#sidebar #shamelessselfpromotion {
width: 300px;
}
As you can see, the code edit was rather minor but needed to ensure the page was compatible in both FireFox and Safari, as a side benefit it also ensured the page was compatible with Internet Explorer and the Wii.

Bloody Mess of a WordPress Theme

bloody hell 288x300 Bloody Mess of a WordPress Theme image

This theme started out as a Christmas theme for WordPress but when I couldn’t find a good set of Christmas lights it all went horribly, horribly wrong. It’s based off the Free Community Friendly Theme I did earlier today so you can see how easily things can be modified.

As with my earlier themes, this one is optimized for search engine optimization.

Looking to win a premium WordPress theme?

Blog-Oh-Blog is running a free giveaway contest for premium themes, if you’re looking to win a premium theme for your WordPress blog.

http://www.blogohblog.com/mega-contest-win-10-premium-themes-worth-700/

Ten Awesome WordPress Web Sites

Indiana University School of Journalism

Indiana University School of Journalism http://journalism.indiana.edu/

anderson cooper 360 blogs from cnncom 20081110 300x300 Ten Awesome WordPress Web Sites image

Anderson Cooper 360 http://ac360.blogs.cnn.com/

WordPress from contests to templates, and a cool pumpkin to boot.

I found a couple of interesting WordPress websites today, there’s an ongoing competition going on but I think Eric has to win for the best WordPress website today, he’s done a great Pumpkin carving that is sure to amuse even Matt. Speaking of WordPress, if you’re looking for a WordPress expert for your next job you’re looking for some freelance WordPress work, you should take a look at http://jobs.wordpress.net.
On a more technical note, there was an interesting piece about stripping classnames in WordPress which pointed to a couple of great sources to how to fix this problem at MaisonBisson.com. And of course, a lot more press about the LinkedIn plugin here and here.
To wrap it up today … 21 WordPress themes:

Using WordPress with LinkedIn and developing custom themes.

If you’re not already using LinkedIn, you should take a look at the business networking tool. LinkedIn is a cross between Facebook and Monster, a social networking website designed to help build your professional career and maintain professional contacts. You can even using the WordPress for LinkedIn plugin to automatically your profile with the latest posts from WordPress.

There’s an interesting comparison of WordPress vs. MovableType with an interview featuring Matt Mullenweg, the article takes a good look at using MovableType for larger websites. Remember if you’re using WordPress for large volume websites you’ll definitely want to read my piece on speeding up WordPress.

There’s a lot of theme reviews done with an eye for design but I really enjoyed themes for developers which takes a look at some themes with more power and a developer focus. Speaking of themes, there’s a great 10 step guide for improving your own WordPress install, it goes over the process of how to improve your WordPress site in the most basic terms for new users. Lunarpages announced their WordPress theme winners today, there’s a lot of great looking work so check them out this morning but if you’d rather develop one for youself there’s a great tutorial for you at developing a Wordpress theme from scratch as well as an interesting review of Artisteer.

Usability is a huge part of my consulting business and WordPress just released a study of their own at Usability Testing Report that takes a look at why the admin for WordPress took on such a major revamp.