WordPress Installation

To install and configure the blog from scratch follow these steps:

  1. Create web site.
  2. Add SSL and enforce HTTPS access (i.e. redirect all HTTP to HTTPS).
  3. Create database.
  4. Install WordPress on the web server:
    1. Download the current installation package form wordpress.org.
    2. Unpack and copy the files to the blog’s doc root.
    3. Call the blog’s URL and follow the installation instructions.
  5. Create new Administrator user and delete the default admin user.
  6. Add basic auth protection in .htaccess for the folder wp-admin.
  7. Grant write access to the tech webserver user to the folder wp-content.
  8. Add the following lines at very end of wp-config.php:
    /** use direct method for WordPress updates without FTP */
    define('FS_METHOD','direct');
  9. Disable REST-API for not logged-in users (≥V4.7): ad the following lines to your functions.php:
    // Return an authentication error if a user who is
    // not logged in tries to query the REST API
    add_filter( 'rest_authentication_errors', function( $access ) {
    if( ! is_user_logged_in() ) {
    return new WP_Error( 'rest_API_cannot_access', __( 'Only authenticated users can access the REST API.', 'disable-json-api' ), array( 'status' => rest_authorization_required_code() ) );
    }
    return $access;
    });
  10. Install the plugins. You can do this directly in the back end (menu: Plugins > Add new).
  11. For db backups (with plugin „WP-DBManager“) create the folder wp-content/backup-db.
  12. To prohibit public access to the backup files copy the file wp-content/plugins/wp-dbmanager/htaccess.txt to wp-content/backup-db/.htaccess.
  13. Go to the settings (menu: Settings) and do the configuration for:
    1. General
    2. Writing
    3. Reading
    4. Discussion
    5. Media
    6. Permalinks: Do NOT configure anything yet! Do this later at the end after configuration of the plugins, since the configuration of
      Polylang and WP-CleanUmlauts2 have an impact on the permalinks)
  14. Activate all plugins except: Google XML Sitemaps.
  15. Do the configuration for the following plugins:
    1. Akismet (menu: Settings > Akismet): Create an account (sign-up with e-mail, username, password) and enter the API key.
    2. Antispam Bee (menu: Settings > Antispam Bee)
    3. AntiVirus (menu: Settings > AntiVirus)
    4. Bad Behavior (menu: Settings > Bad Behavior)
    5. Broken Link Checker (menu: Settings > Link Checker)
    6. Captcha
    7. Disable Google Fonts
    8. Feed Statistics (menu: Feed Statistics)
    9. Limit Login Attempts (menu: Settings > Limit Login Attempts)
    10. (Plainview Activity Monitor)
    11. Polylang (menu: Settings > Languages)
    12. Post Notification (menu: Settings > Post Notification > Settings)
    13. Revision Control (menu: Settings > Revisions)
    14. Sitemap
    15. Subscribe To Comments
    16. TinyMCE Advanced (menu: Settings > TinyMCE Advanced)
    17. Uber Login Logo (menu: Settings > Uber Login Logo)
    18. WP-CleanUmlauts2 (menu: Settings > Umlauts)
    19. WP-DBManager (menu: Database > DB Options)
    20. WP-Piwik (menu: Settings > WP-Piwik): Add the „auth token“ of the corresponding website in Piwik (menu: API).
  16. Define the permalinks (menu: Settings > Permalinks). Saving the settings will create the new permalink structure. You will not be able to
    access the front end until having performed the next step! The direct access to the back end will be still accessible.
  17. Add the following lines to .htaccess in the doc root: 
    # BEGIN WordPress
<Directory>
     AllowOverride All
</Directory>
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /
  RewriteRule ^index\.php$ - [L]
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule . /index.php [L]
 </IfModule>
 # END WordPress
  18. Delete all sample pages, posts, and comments.
  19. Activate the following plugins:
    1. Google XML Sitemaps
    2. …
  20. Do the configuration for the following plugins:
    1. Google XML Sitemaps (menu: Settings > XML Sitemap): Click on [Update options] at the end of the page to create the XML
      sitemap with the current permalinks.
    2. …
  21. Create users.
  22. Select a theme or install your own (menu: Appearance). Configure your theme and create your menu structure.
  23. Your basic setup is done. Check the front end and start blogging!

See also the official „Installing WordPress“ documentation.

Schreibe einen Kommentar