Best Practices on Optimizing, Securing and Scaling WordPress

By: Simon LimWordPress ConsultantTwitter: @simonlim88

Email: simon.lim@wpdesignstudio.com

Content

• WordPress Optimization – hacks and how to• WordPress Security – best practices, tricks• Scaling WordPress – tips

WordPress Optimization:How to make WordPress

perform faster?

Why is it important?

Speed - Improve user experience / interaction

Marketing - Improve search engine optimization

Revenue - Increase income

Basic Web Optimization Tips

1. Static (CSS/JSS) Files – Top: CSS, Bottom: JS2. Minify – CSS / JS 3. Reduce number of HTTP request – combine4. Image Optimization – remove bytes5. Reduce/remove rich media – i.e Flash6. Offload static files to Content Deliver

Network7. Choosing the right web hosting provider

WordPress Hacks - Optimization

• Update WordPress to its latest version • Remove unused/inactive third party

plugins/themes• Optimize DB occasionally (via

plugin/phpMyAdmin) • Caching WordPress • Choosing right WordPress theme / framework• Disable WordPress post revision• Load jQuery from big boys

WordPress Security:Is WordPress Secure?

What if my WordPress site got hacked

1. Check with web host 2. Restore WordPress to latest copy (personal /

web host backup)3. Lock down WordPress – refer to best

practices

Important Note: Backup, backup, backup (Schedule)

Lock Down WordPress - Best Practices

• Check file and folder permission • Change default WordPress prefix – “wp_”• Disabled “admin” account or set “admin” to

subscriber • Disabled third party WordPress plugin • Upgrade WordPress to latest version • Don’t install many/multiple security plugin

Scaling WordPress:Is WordPress scalable?

How?

Don’t put everything in one basket

General Tips

1. Choosing the right Web Hosting Provider/Platform

2. DNS – Host externally (Anycast DNS)3. Server – LAMP stack optimization4. Media/Static Files – content delivery network

(CDN)

Web Hosting Provider

• Conventional : Adding more physical server as u grow

• Cloud based hosting: Scale up/down resources based on supply and demand

DNS Hosting

• Host DNS Externaly • Anycast DNS – recommended • Reason: load balance, redundancy and high

availability • Lower TTLs is needed for HA setup

LAMP Stack Optimization

• OS – Linux (Free and fast)• Web Server – optimize apache.conf • Database – optimize mysql.conf• PHP – compilation • Caching – APC / Memcache

• Exploring and tried out on several methods is best way for optimization.

Content Delivery Network (CDN)

• Free CDN – limited resources, no SLA• Commercial CDN – can be costly depends

traffic of origins, bandwidth usage and content served

• Custom CDN – build from zero, complex setup but managed cost

Advice

• Be open and generous in exploring options• Be gratitude to your system admins• Willing to spend money on server

infrastructure

Questions & Answers

Thank You!

By: Simon LimWordPress ConsultantTwitter: @simonlim88

Email: simon.lim@wpdesignstudio.com