Presentation on Speed and Security , WordPress Kathmandu 2016

1. WordPress:
Speed and Security
- DIGAMBER PRADHAN
- WEBSITE: HT TP://WWW.DIGAMBERPRADHAN.COM.NP/
- TEAM LEAD @ WEB EXPERTS NEPAL

2. Active and Passive Components of A Site
1. Speed ( Active )
2. Security ( Passive )

3. Speed
1. In 2016 EVERYTHING is fast
2. The modern website viewer expects everything
to load as quick as you can snap your finger
3. Site abandonment is a major problem
4. Transaction abandonment is a even bigger
problem
https://blog.kissmetrics.com/loading-time/?wide=1

4. Different Aspects that Effect Speed
1. Page Size
2. Server Location
3. Number of HTTP Requests
4. Caching
5. Server Response Time

5. Tools to test Page Speed
1. GTmetrix (https://gtmetrix.com/ )
2. pingdom (https://tools.pingdom.com/ )
3. PageSpeed Insights ( https://developers.google.com/speed/pagespeed/insights/ )

6. Something Controversial
1. Ignore PageSpeed Insights
2. Yes Ignore PageSpeed Insights
3. PageSpeed Insights doesn’t actual measure
speed

10. Lets Optimize
1. Good Hosting
2. CDN
3. Minification
4. Caching

11. Good Hosting
1. Do not ignore value of good hosting
2. A good server provides many features
3. If the server response time is slow your site is slow

12. Content Delivery Network

13. Minification
1. As far as possible use minified scripts when you develop
2. The purpose of minified scripts is to reduce the page size

14. Minification Contd.
1. Plugins
◦ Better WordPress Minify
◦ Autoptimize

15. Caching
1. Caching refers to storing content that repeats itself such as
=> Images
=> CSS
=> JS
2. These repeatedly used resources are cached (or stored temporarily to be re-used)
3. This saves multiple requests as they are loaded from the cache instead of requests to the
server, and thus also saves bandwidth consumption

16. Plugins
1. WP Super Cache (free)
2. WP Rocket ( premium )
3. W3 Total Cache (https://wordpress.org/plugins/w3-total-cache/ ) (free)

17. Security
1. Prevention is ALWAYS better than cure
2. We don’t always think about security, but it’s the first
thing that should be in our mind
3. Imagine if someone broke into your WordPress site
and compromised all your hard work
4. Imagine if someone hacked your E-Commerce site
and used it to charge your clients

18. Why I call it the Passive Aspect

19. Is WordPress Secure ?
1. In Short Yes (but its complicated)
2. The Core WordPress itself is secure
3. Easy to use, Difficult to Maintain
https://sucuri.net/website-security/website-hacked-report

20. Some Security Stats

21. Reason for Vulnerabilities
1. Updates or more specifically lack there of
2. Plugins and Themes
Examples: rev-slider, gravity forms
3. Lack of Security Measures
4. Brute Force Attacks (most common form )

22. Have I been Hacked ?
1. When I click my link on google I get redirected to another site
2. Google shows this site may be hacked on search results
3. Weird search results are showing up when I do [ site: http://www.mysitename.com/ ]
4. I can’t log in to my site

23. What we can do ?
1. Regular Backups
2. Security Plugin
3. Security Measures ( Hardening )

24. Regular Backup
1. Backups ensure that you don’t lose
valuable data
2. Have a cyclical process for backing up your
site
3. The more detailed the backup the better

25. How to Backup
1. Manual Backups
2. Plugins for regular Backups
a) https://wordpress.org/plugins/backupwordpress/
b) https://wordpress.org/plugins/backwpup/

26. Security Plugins
1. Wordfence
2. iThemes Security
3. Sucuri Scanner

27. Basic of Recover
1. DO NOT PANIC!!!
2. Identify type of breach
3. Begin recovery

28. Conclusion

29. Resources:
1. Kissmetrics: https://blog.kissmetrics.com/loading-time/?wide=1
2. Sucuri: https://sucuri.net/website-security/website-hacked-report
3. Plugins:
4. Better WordPress Minify : https://wordpress.org/plugins/bwp-minify/
5. Autoptimize : https://wordpress.org/plugins/autoptimize/
6. WP Super Cache: https://wordpress.org/plugins/wp-super-cache/
7. W3 Total Cache: https://wordpress.org/plugins/wp-super-cache/
8. WP Rocket: https://wp-rocket.me/
9. Wordfence: https : https://wordpress.org/plugins/wordfence/
10.iThemes Security : https://wordpress.org/plugins/better-wp-security/
11.sucuri scanner : https://wordpress.org/plugins/sucuri-scanner/

30. Get Started with Optimization
1. https://codex.wordpress.org/WordPress_Optimization
2. https://developers.google.com/web/fundamentals/performance/

31. Resources for Securing WordPress
https://codex.wordpress.org/Hardening_WordPress
http://www.wpbeginner.com/wordpress-security/
http://wplift.com/why-wordpress-website-security-important