Brute force login attacks targeting WordPress sites are quite common, such as in April 2013 when more than 90,000 sites were targeted. There are a handful of good ways to protect yourself against these attacks:

• Choosing a strong administrator password
• Installing a plugin that guards against brute force logins, such All in One WP Security or BruteProtect
• Changing the default wp-admin url with a plugin such as HC Custom URL

However, I prefer to use a two-factor authentication method that requires a code from my phone to complete the login process. Google’s Authenticator has been gaining ground as a mobile app for providing secure codes. In fact, you may already have the Google Authenticator app on your phone, as a number of web services are now integrating with it, including cloud file store provider Dropbox, cloud hosting provider Digital Ocean, and name service provider Gandi.net.

And, fortunately, there is a simple WordPress plugin by Henrik Schack that integrates with Google 2fa; it’s also called Google Authenticator. Installing and using this plugin is quite easy—and the security benefit is significant.

This tutorial will walk you through setting up the Google Authenticator WordPress plugin for your own sites.

Installing the Google Authenticator Plugin

From your WordPress Dashboard, go to install a new plugin and search for Google Authenticator, and click Install Now:

Then, click Activate Plugin:

From the dashboard, click Users > Your Profile and scroll down to the Google Authenticator settings:

Click on the checkbox for Active. Modify the description so that you will recognize the site on your Google Authenticator mobile app and show the QR code.

Note that the plugin works for multiple users—and each user has the choice of enabling it for themselves.

Adding Your Site to the Mobile Authenticator App

From your mobile Google Authenticator App, click the upper right pen (for editing). Click the plus sign at the bottom for adding a site. Choose to scan the barcode and point your camera at the QR code. The process is quite fast.

Log out of your WordPress site and you should see the additional field for Google Authenticator on your login screen!

To log in, enter your username and password as usual, but visit your Google Authenticator mobile app to get the additional code for logging in. The codes are time-critical and expire every few minutes.

Congratulations, you’ve successfully implemented two-factor authentication on your WordPress site.

Troubleshooting

In writing this tutorial, I was accidentally logged out of my site before I had registered my site with the mobile app. I couldn’t log back in—but luckily, there is a simple solution listed on the plugin support page.

I just had to log in via SSH to my server and change the name of the plugin folder temporarily. Then, I logged back into WordPress, reset the plugin folder name, added my site on my mobile app, and I was good to go.

Another way to do this is through the database using a tool such as PHPMyAdminand these queries. If you’re not self-hosting, you may need to request help from your hosting company.

In Closing

I hope you’ve found this useful; now go secure your WordPress sites.

Please post any comments, corrections or additional ideas below. You can browse my other Tuts+ tutorials on my author page or follow me on Twitter @reifman.

from : http://code.tutsplus.com/tutorials/using-google-two-factor-authentication-with-wordpress–cms-22263

This Demo Content Brought to you by Momizat Team

this is tags and keywords : wordpress themes momizat Tutorial wordpress templates

At the recent WordCamp Edinburgh, I took part in a panel discussion about WordPress theme development and the options available to developers when building themes. The overriding conclusion from the session was that there isn’t a one-size-fits-all answer and that the best method depends on the needs of the website and the capabilities of the developer.

But if you’re starting out building WordPress themes or want to develop a system for building them more efficiently or robustly, how do you decide which approach to take? In this article, we’ll briefly describe how WordPress themes work and then look at some of the different approaches to developing them, with tips on which approach might be most suitable for your website and circumstances.

How Does A WordPress Theme Work?

In WordPress, themes drive a website and determine what it contains, how it behaves and what it looks like. The theme is separate from the content, which is held in the database. This means you can use the same theme on more than one website, regardless of the content of the websites — which you might already be doing if you’ve downloaded themes from WordPress’ theme repository.

What To Consider When Developing A WordPress Theme?

Before deciding which approach to take to develop your theme, identify your constraints. These likely include the following:

• Time
  How much time do you have to develop your theme, or to learn how to do it?
• Budget
  This is related to time but also has to do with whether you can afford to pay for a premium theme or a theme framework.
• Capability
  How familiar are you with theme development, with CSS and PHP and with how themes work? If you’re not familiar, how much do you want to learn?
• Future-proofing
  Will your theme need to be updated in future? Will other developers be working on it in addition to you? If so, then your approach will need to be as robust as possible.
• Repetition
  Do you see yourself developing a number of similar themes in future? If so, your approach will have to allow for code to be reused.

We’ll revisit these considerations at the end of the article and identify which development options are most suitable for various situations.

Theme Development: Your Options

A few options are available for developing your theme or themes, and investigating them before you roll your sleeves up and start coding would be worthwhile. Picking the right approach will result in a better theme, with more robust code, and it will minimize the amount of revisions you’ll have to do later. It will also help you to build the theme more efficiently.

The options we’ll look at here are:

• Build a theme from scratch,
• Edit (or “hack,” some might say) an existing theme,
• Use the theme customizer to tweak an existing theme,
• Create a child theme to make changes to an existing theme,
• Create your own parent theme (using one of the approaches above) and child themes,
• Use a theme framework.

1. BUILD A THEME FROM SCRATCH

This approach is the most difficult if you’re inexperienced. But if you’re a seasoned WordPress developer, it will give you the most control. It might be the most appropriate method if you’re importing HTML from an existing static website that is being upgraded to WordPress with no other changes.

However, when transferring a website to WordPress, conducting a review of it as part of the process, rather than simply copying the code across, is a good idea. If you are copying a static website, you’ll need to keep a close eye on your code to ensure that it’s clean, efficient and valid.

2. EDIT (OR HACK) AN EXISTING THEME

This is how most people start with WordPress theme development: in working on a theme that they’ve downloaded, they see that some styling isn’t quite right, so they delve into the style sheet and make some edits. Starting like this is tempting because it feels like a quick and easy way to achieve the effect you want. But there are some dangers:

• If you ever switch themes, that update will override any changes you’ve made.
• It’s easy to add repetitive code by adding new styles lower down in the style sheet that override styles higher up, rather than removing what you don’t need.
• The website could end up with a lot more code than it needs.
• If the theme isn’t well coded or commented to begin with, you could get yourself into a bigger mess and find that you have to make a lot of fixes.

However, hacking a theme can work if you go into it with your eyes open. It may be an option if the following are true:

• The theme you’re using is well written, valid and commented (e.g., the default WP theme, Twenty Eleven);
• The changes you’re making are so drastic that you wouldn’t need to update the original theme;
• You understand the PHP and CSS contained in the theme and are comfortable editing, adding to and removing it without breaking the theme.

If you do decide to go down this route, keeping a backup of the original theme and commenting your code thoroughly are important. I would also advise commenting out any code that you don’t want and then testing to see what happens before deleting anything.

3. USE THE THEME CUSTOMIZER TO TWEAK AN EXISTING THEME

The theme customizer was released with WordPress 3.4. It gives you the option to customize a theme without writing any code, simply by using a WYSIWYG interface. Depending on how well the customizer is written into the theme itself, you can use it to change images, titles, colors and even the layout. Expect to see more themes with the customizer integrated into them.

Using the WordPress theme customizer with the Twenty Ten theme.

The theme customizer stores your changes in a separate file, not in the theme’s style sheet, so there will be repetitive code.

For more information, take a look at Otto on WordPress’ video tutorial or guide to integrating the theme customizer into your own themes.

4. CREATE A CHILD THEME TO MAKE CHANGES TO AN EXISTING THEME

This approach is similar to editing an existing theme, but safer. It consists of creating a brand new theme that is defined as a child of the existing theme. Where your child theme doesn’t have a particular file but the parent theme does, it will use that. Where the child theme does have a file, that file will override the equivalent in the parent. This line tells the browser to load the parent theme’s style sheet before rendering any of the styles in the current style sheet. This frees you from having to duplicate any styles in the parent theme that you want to use.

So, that’s how child themes work. But when is this the best approach? I would suggest using it in the following cases:

• You already have a theme (to be used as the parent) that contains most of what you need for your theme;
• You want to be able to update your parent theme (for example, when theme updates are released following a WordPress update);
• You don’t want to get tied up in knots from hacking an existing theme;
• You want the option to revert to the parent theme or to develop another similar theme in future (which would be a new child theme);
• You’re developing a number of similar websites with some minor stylistic or content differences (I did this when building similar websites for a client that owned multiple companies);
• The difference between your child and parent themes is not so huge that you need to start from scratch, or not so huge that your child theme’s code will override anything affected by updates to the parent theme.

from : http://www.smashingmagazine.com/2013/03/13/a-guide-to-wordpress-theme-options/

This Demo Content Brought to you by Momizat Team

this is tags and keywords : wordpress themes momizat Tutorial wordpress templates