I recently read on the Wordpress blog and other news sources about a worm that is going around and attacking older Wordpress blogs (pre-2.8.3). The worm registers itself as a user, exploits a security hole in older versions of Wordpress, makes itself an admin, then uses javascript to hide itself while sticking spam and malware in your posts. Yikes!

Fortunately, the fix is easy. Upgrade to the latest version of Wordpress, which is version 2.8.4, and the security hole is closed. If you already have a recent version of Wordpress, this is a cinch as you simply click the upgrade button in your dashboard. If not, download the latest version, unpack, and follow the instructions to upload and upgrade.

Before upgrading, though, here are the steps I would go through to back up everything and add additional layers of security to your blog:

1. Install the WP-DBManager plugin. I love this plugin because it gives you a lot of options and control when backing up your database. It also makes it very easy. I install this plugin right off the bat to every one of my client’s blogs.

2. Use the above plugin and backup your database. This is fast and takes just a couple of clicks. I usually keep a copy of the backup file on my harddrive and on the server.

3. I copy the entire wp-contents folder to my harddrive. This saves all of my custom themes file and all media in the uploads folder. Have a ton of pictures on your blog? This is where they’re stored…make sure to back that stuff up. This is just as important as backing up your database, IMO.

4. Do the Wordpress upgrade. Check everything.

5. Install two security plugins for additional security: WP Security Scan and Secure Wordpress. I think both of these are must-haves, so I include them for all my clients and with any new Wordpress install.

You can read a very good article that gives more detail about the worm and Wordpress security in general on Lorelle’s blog.

Don’t be a victim to the dreaded worm. Upgrade your blog and stay safe.

(6 Exercises) x 4

1. SDLHP (sumo-deadlift high pulls) – 10 reps
2. Dumbbell thrusters – 10 reps
3. Sit-ups – 20 reps
4. Pushups – 20 reps
5. Jumpies (can also do air squats) – 20
6. 1/4 to 1/3 mile run. (We ran 1 lap around the athletic fields at Blue Jacket Park in Orlando).

Do four rounds of the above, push yourself hard on the run and your heartrate will get up there. We took several water breaks and did this thing in under 40′, if you’re really cranking on it you could probably do it in less than 30′.

New Crossfit Firebase Website

Two Challenges: Exporting Images and Changing Links

The first challenge was exporting content. In case you didn’t know, Typepad has a really crappy export function. You can export the textual content but no media, and there’s no way to get FTP access to a Typepad.com account. This doesn’t make a lot of sense and it makes me think Typepad doesn’t include a good export to discourage people from leaving them. You can read about their export in the support section of Typepad.

CrossfitFirebase.com is essentially a photo blog with blog posts running 6-7 days per week, with many posts having 2-3 pictures. On top of that, there were several galleries with hundreds of pictures each that had to be migrated. The final tally was over 3000 images that needed to be moved over. Yikes.

The second challenge was changing the thousands of links from the Typepad linking structure to the new Wordpress paths.

At first I had no idea how I was going to tackle the issue of moving all of those images over and obviously it was unfeasible to download/upload them individually. Fortunately, after doing several hours of research, I found this super handy 2009 Guide for moving Typepad to Wordpress by Foliovision. I have to give major props to those guys for putting the guide together because without it a lot folks would be totally screwed. A project that could have taken 50+ hours only took 12 hours because of the tools and tactics outlined in the guide.

HTTrack Website Copier and Search Regex

There are two tools from the guide I want to mention here. The first is HTTrack Website Copier, an amazing free tool that does exactly what it sounds like it does. Launch, input a few parameters, and let it go to work copying an entire website to your hard drive, all the while preserving the directory structure and file names perfectly. I set this puppy loose around midnight and in the morning I had the entire Firebase site mirrored locally, including all 3000+ of those images. Once I had the images, I FTP’ed them en masse into their new hosting account. Again, because of the large number of images, I had to set it loose uploading and disappear for lunch.

The next task was migrating the textual content and getting all the posts and comments to appear. For this, I used the Typepad export and Wordpress import tools, which worked fine. So now all the content was in there, but the links were still pointing to the old Typepad site.

To overcome the second hurdle of updating the links, I used a Wordpress plugin called Search Regex, which can be found in the Wordpress.org plugin directory. This little tool was totally badass. It’s a site-wide search and replace tool, so I simply replaced the old Typepad directory paths with the new Wordpress paths. A couple of clicks and every single link was updated and working. Awesome. Here’s a screenshot of how it works:

To build out their galleries, I used the NextGEN Gallery plugin, which is chock full of features and works awesomely. There’s a lot of potential with NextGEN so it was a definite upgrade over Typepad galleries.

The last major task was taking a free Wordpress theme, Acid Green Pro, and customizing the CSS to achieve a look that the Firebase folks were happy with. After delivering the site, the clients were really pleased and so was I.

Heacock Classic sells insurance for classic, collector, antique and other fun type cars. At one point, Heacock was in the top 5 in Google’s organic rankings but had fallen off pretty badly to the tune of not being in top 3-4 pages by the start of the project. There are only a few major players ranking in the online classic car insurance niche, so I figured it wouldn’t be too difficult to get Heacock competing again. Heacock derives much of their business from online searches and they’ve been spending a good chunk of their marketing budget on Adwords.

My analysis was the classic car insurance niche was a bit immature and ripe for a player with some decent SEO and content to move quickly up the rankings. The main key phrase that everyone was searching was “classic car insurance,” to the tune of 49,500 searches per month in the USA. In addition, that same term was getting 56-70 clicks per day on Adwords. When I began the project, the other top online companies were Hagerty.com, Grundy.com, and JCTaylor.com, all in the top 5 on Google.

CNP had already build out the site on Wordpress. I went in and loaded a handful of plugins, including All-In-One-SEO and WP SEO Master. I did all the basic site SEO: filling out meta descriptions, revising text, filling in page titles with the important key phrases, adding title attributes to links, adding alts to images, etc. Since the site was already designed and built out, there wasn’t much opportunity to add additional content and really spread the keywords around. I did submit it to a handful of directories for the backlinks. My report included a large list of 3rd party sites related to the classic niche that might be interested in link exchanges or adding sponsorship badges.

Post-launch, even the basic SEO had an strong effect. The site moved quickly up the rankings, going from the #17 position to #6 within a week, displacing jctaylor.com out of the top 5. The client was pretty pleased and I’ve been tracking an increase in traffic since the site launch, which means more leads (and sales) for them. Our goal is to get them ranked at the #1 spot in a year.

From the About description:

Bill Gates hopes to solve some of the world’s biggest problems using a new kind of philanthropy. In a passionate and, yes, funny 18 minutes, he asks us to consider two big questions and how we might answer them.

How to have your best year ever, part 2:

How to have your best year ever, part 1: