My web site is using WordPress as the “engine” to build a convenient and efficient site. WordPress happens to be using “themes” to appropriately display the contents (that is what is differentiating each WP website from the others). This capacity has helped develop a thriving community of themes, some being free, some being purchased.

The main trouble is that themes like any other piece of software are susceptible to bugs and could be exploited by hackers. I recently noticed that my (previous) theme was clearly outdated (not updated in the last 24 months) and including some known security issues leaving it open to abuse.

Lesson learned: Do not use any piece of software (including a WP theme) if it is not actively supported.

Application: I decided to drop the free (and unsafe) theme I was using. I swithed other to one of the “official” themes from WordPress.org. And I am learning to configure it properly. Hence the changes you can currently observe.

• Worried about WordPress and GDPR? Start Here
• GDPR: What Does the New Data Regulation Mean for Your Website, Business and Data?
• How to make a WordPress website compliant to GDPR
• Automattic and the General Data Protection Regulation (GDPR)
• GDPR Compliance and WordPress Forms: Everything You Need to Know

Have a nice read!

Please, note: I am not a lawyer or your Legal Department, it all merely comes from my reading and my understanding.

Deployment

Cookies

First step (normally, this should be in place for quite some time already, since this started a long time ago): Add an informative message to inform visitors that you are collecting cookies.

I simply used a small plug-in (you can find others too) : Cookie Notice from dFactory.

Pros: It is working in various languges (and in English), it has been tested on more than 500,000 sites before mine, it starts in less than a minute.

Contact form

For many reasons, you will need to have a decent contact form (including to be able to answer GDPR-related requests). I recommend a simple and small (and free) forms editor like Ninja Forms.

In two minutes, you will have a working contact form. Don’t forget to add the checkbox with “By using this form you agree with the storage and handling of your data by this website” (This should be present on all your forms).

Then, you need to create a “Contact” page in WordPress. You will include the specific code to include the form you just created with the following shortcode:

Small GDPR support: Ninja forms allow you to setup forms without storing any data on the web site, reducing the load to comply with GDPR in simpler forms.

But, don’t forget to enable the sending of the confirmation message to the comment author (all the more because the post-form message includes mention of this confirmation – be consistent).

On top of this, if your web site includes a comment system (quite common fact), I recommend using a plugin to include the standard reminder checkbox: WP GDPR Compliance from Van Ons. Bonus: It makes some recommendations on various GDPR-related cases.

Data Protection Officer

Name somebody (with an email address) as the internal interface for all private data issues. It is not compulsory (for smaller teams) but it is so much clearer (and recommended) that somebody feels i charge of this (even the CEO). This person will be contacted bu visitors willing to know what data you collect and how to remove all their personal data from the web site (these are legal requirements).

Make sure that this person is reachable through a very easy interface (including the contact form or some other form).

Privacy policy

Above all, you must make sure that you can explain simply what are your intentions about private data you will collect (private data include email, name, IP address, etc.) and how you intend to comply with your legal obligations. This page must tell it all simply.

Try and write it right on the first attempt. You are legally bound to inform all your users any time you make a change (even simple ones)…

This is a WordPress page, rather than a poost (it must stay readily available and easily reachable by all even in the future).

I recommend to -more or less- follow the GDPR themes (it’s easier):

• Existence (or not) of a Data Protection Officer, in charge of the whole process of personal data handling
• Definition of data collection, handling, storing, transfer and removal processes
• Creation of a process to notify any data breach
• Explicit consent to data collection
• Right to access (and removal) of personal data

Access to personal data

You must give full access to any user’s personal data stored on the web site. This is realtively easy using a plugin (GDPR compliance from Scribit) and a specific page where you will only write the shortcode:

[gdpruserdata]

Of course, you can add some more details (refer to the plugin help information for more options).

Then, you can direct the requests to this page which will display the full breadth of personal data. As this is not a very nice page (rather dry reading), I recommend to keep it masked (I don’t feel it is necessary to show it permanently to all – answering requests should be enough).

Annoncement

Maybe not the worst or the most complicated, but I finally added a small message on the web site to announce the deployment of this whole process. Explaining is better than waiting for people to ask. And the message is positive: You care about your users and visitors.

I had noticed the “trusted_domains” configuration parameter; I had also noticed that it was apparently linked to failed attempts from a different location (different of my usual personal computer). But I did not understand it well.

As a matter of fact, a very clearly written post from Lukas Reschke, A tale about trusted_domains has been the source of my enlightenment.

The default installation of ownCloud had easily allowed me identify that www.mydomain.com in the list of trusted domains (of domains used to publish the cloud information). I thought that my difficulty was coming from trying out of mydomain.com (as if I was on the server), but my trusted_domains list needed to simultaneously contain www.mydomain.com and mydomain.com.

This was rather silly, but I did not think more about it: I was not typing the same address depending on where I was connecting (by luck, or rather lack of luck) and I started to believe that the location was important (and it was not really).

So, I replaced

'trusted_domains' =>
array (
0 => 'www.mydomain.com',
),

with

'trusted_domains' =>
array (
0 => 'www.mydomain.com',
1 => 'mydomain.com',
),

Done!

The advantage of using this connection parameter was to avoid a security risk (well explained in the above post) and to allow different addresses to be used to access the same cloud server. For example, when users on the internal company network are using a different address (access through internalcloud.local) than those outside (access through mydomain.com). In this case, we would use configuration parameters like:

'trusted_domains' =>
array (
0 => 'www.mydomain.com',
1 => 'mydomain.com',
2 => 'internalcloud.local',
),

Good! One problem solved.

After that, it’s clear that ownCloud is a very good product to replace DropBox with a tool more personalized and more secure (at least, it is not hosted in an unknown place like DropBox).

As a matter of fact, there is no obvious difference for the casual observer. I just verified the correct operaiton of my web design production environment (you couldn’t probably care less) and I modified the geographical coordinates of the web site (latitude and longitude) that you probably don’t see but which allow Google and others to locate me on Google Maps (at least, as soon as it will be taken in to account by Google, of course) in the Courbevoie city where I live now.

If you really want to know how I did this, I just added (or, rather, updated the following HTML code snippet in the page headers:

I found a good web site that will help you determine if you are color blind and which will support web designers trying to make their web sites better: WeAreColorBlind.com. They are even providing patterns that show how best to use colors in this context.

If you want more support, I also recommend a visit to Chrometric, a web site where you will be able to freely download a tool to test your web site against various kinds of color blindnesses (you know that not all people have the same kind of insensitivity to colors, don’t you?) and allow you to test various solutions or improvement you may have designed.

For example, my other web site, www.YLovePhoto.com as seen by 6% of the male population:

When you design a web site, it happens that you need to create graphs or technical charts. But this is quite difficult if you don’t spend a life drawing little charts or if you are not satisfied with the charts out of Excel (or OpenOffice Draw). For this, you need to have a good chart/graph package.

I found two of them that I want to share with you:

• amCharts is a set of Flash charts for your websites and Web-based products. AmCharts can extract data from simple CSV or XML files, or they can read dynamic data generated with PHP, .NET, Java, Ruby on Rails, Perl, ColdFusion, and many other programming languages. I like the final appearance even if they could have more of a designer touch.
• Chartle provides simple and interactive charts, maps, plots and diagrams. It’s still in beta right now (beg of 2010) but the results are quite good.

The program will recognize the shortcut, then automatically replace it with the correct text. Type “win“, see “Windows” appear. Type “HTML” and see a full block of selected HTML code appear (I use such shortcuts to create blocks of HTML code on this site, reducing typing time and avoiding typos).

For this, you need to be supported by a small program. I found two interesting ones :

• AutoHotkey (for Windows) allows to write very simple scripts (examples are provided); I use it everyday (it works perfectly on a Windows 7 installation, by the way).
• Some people would prefer to explore Texter and TextExpander, too.
• If you are on Linux, you will prefer to have a look at AutoKey which is freely inspired by AutoHokey (copying is a form of flattery)

In the beginning was Google which installed its servers in China in 2006. The “do no evil” company accepted the conditions of the government of the PRC and included heavy filtering and censoring of its search results (looking for Tienanmen will produce wildly different results in and out of China). But in January 2009, Google discovered that some hackers obtained some detailed information out of its own servers at this was targeting both American companies and Chinese political opponents or partisans of free speech in China. Subsequently, Google announced its intention of both lifting the censorship and leaving China.

What is still very unclear:

• Is Google really serious about these two options?
• Is the main reason for its ire, the political chase or the technological spying? (the US government including Hilary Clinton pushed hard with Google)

What is clear:

• The breach of information seems limited (only email subject lines have been breached, not contents).
• The hackers were affiliated to Chinese official bodies and did not only target Google.
• The hackers used some social engineering and security issues present in Internet Explorer and Adobe PDF, which were probably known but not closed by Microsoft and Adobe.

So, when such information appears in wide open channels of the world press, what happens? Most experts started commenting on the security loopholes in Internet Explorer 6 (and about Adobe PDF reader, too). Many people observed that Internet Explorer 6 is rather old and it is unfortunate that so many people still use it despite the known fact that it is a security liability when browsing the Internet. With such a rush, some very official people also asked for replacement of Internet Explorer (mainly v6) to be replaced with more modern browsers. Even representatives of the German, French and Australian governments asked their countries to replace Internet Explorer with something else.

The competition has seen this as a godsend since it created a rush for the other available browsers. For example (see the graph on the side), Firefox saw a brutal explosion of its downloads in Germany (nearly 300,000 Germans have downloaded Firefox in four days): about three times more than usual. It has been true in other countries even if it was not measured as precisely, and it has been observed by the other browsers Opera, Safari, Chrome (currently profiting from heavy advertising in some European countries like France).

This was definitely a good thing since it was bringing better browsers to many computers. It could have stayed there but there were several reaction and parallel events happening at the same time. The first one was that Firefox was preparing a major upgrade to the successful browser (in many parts of the world Firefox is now used by more Internet users than Internet Explorer). Named v3.6, this new version is bigger than what could have been expected from its small number increase (from 3.5 to 3.6 should have been a minor upgrade). This major event accelerated the rush, with people looking for features like:

• Built-in skins, to make it more personalized
• Faster, more stable
• More security conscious with the addition of user-level messages about risks, including reminders about what plug-ins are outdated and must be upgraded.
• Visual tab previews, which show you the tabs when you press Ctrl-Tab
• Aptitude to browse without leaving too many footsteps and traces in your PC (good for clean browsing like when you visit Adult sites)

This version is also appreciated by developers who will find a bunch of little improvements (like CSS gradients).

This is not only a great story to read. This is a great browser and you should consider downloading Firefox 3.6 now!

If you are not completely convinced, you should also consider downloading the newest Opera browser. Opera v10.10 has been available for a few months now and it also offering these advantages, plus some neat features like:

• Opera Unite: to easily share information between Opera users and browsers, without using a web site or a share folder on some social network.
• Opera Turbo: to adapt Opera to very slow Internet connections.
• Speed dial: to get a faster access to some web sites you choose (bookmarks on steroids).
• Mouse moves for faster commands.
• Opera link: to share bookmarks, speed dial configurations between several machines where you use Opera.

Opera is clearly my preferred browsing solution (even if I need to test my web sites on everything I can find, Opera is the central hub of my Internet browsing). Go and download Opera v10.10 now.

And, if you are not sure yet, I can also offer the small and fast browser from Google: Chrome. Since it all started around Google and China, it was worth mentioning, of course.

All this has been going so fast that Microsoft needed to do something. Of course, they have a newer version of Internet Explorer (IE8 is included in Windows 7 and can be downloaded freely. But this was not enough, too many people were starting to complain that Microsoft may wait about a month before updating IE6 in the normal update cycle. Even worse, some experts started telling the world that Microsoft actually was aware of this flaw in IE6 for many months. In such conditions, not doing anything usually turns out to produce a public relations nightmare and prepares for bad wind.

So, Microsoft rushed an out-of-band update to IE6 and Windows Update is now offering the correction to all Windows users still using IE6 (of course, you still have to use Windows Update and it is well known that too many people do not have this configured or do not accept the proposed updates – this is wrong and one the reasons so many PCs are infected with Trojan horses, virus and adwares). Now, if you did not move to a later Windows version and if you did not take advantage of the much better IE7 or IE8, it’s time to upgrade your old hag.

We can expect to see a few more updates to this story in the future, but there is a lesson to be learned (by Google, and most Internet users):

Always keep your browser up-to-date and refrain from clicking on any link in a mail message you did not expect.

Additionally, there is a lesson for Microsoft:

Sorry! but even the older software has to be kept alive when you are or have been the near-monopoly on this technology. This comes with responsibilities.

From GraphJam.

This is time to start your own blog in order to earn some revenue protecting you against the current recession.

• YLovePhoto.com (site specializing in digital photography)
• YLoveBigCats.com (about felines and other big cats)
• YLoveIllusions.com (optical illusions)
• YWantVisits.com (SEO, traffic optimisation and web site revenue maximization)

Your opinion will be welcome, but -remember- this is beta-test. So, it is full of bugs, problems, issues and don’t come back and complain if your significant other dumps you because of it.

Note: Most (if not all) of the photo-related news here will be applied to YLovePhoto.com as soon as I feel free with this new web site.

I had a few difficulties to ensure that images where correctly aligned and displayed after the improvements in their presentation in WP2.6. For those really interested, I ended up adding the following to my CSS file:

/*************************************/
/* Align code for WP2.6 compatiblity */
/*************************************/
.aligncenter, div.aligncenter {
    display: block;
    margin-left: auto;
    margin-right: auto;
}

.alignleft {
    float: left;
}
.alignright {
    float: right;
}

.wp-caption {
    border: 1px solid #ddd;
    text-align: center;
    background-color: #f3f3f3;
    padding-top: 4px;
    margin: 10px;
    /* optional rounded corners for browsers that support it */
    -moz-border-radius: 3px;
    -khtml-border-radius: 3px;
    -webkit-border-radius: 3px;
    border-radius: 3px;
}

.wp-caption img {
    margin: 0;
    padding: 0;
    border: 0 none;
}

.wp-caption p.wp-caption-text {
    font-size: 11px;
    line-height: 17px;
    padding: 0 4px 5px;
    margin: 0;
}

Thanks to the support of the WordPress.org forum.

Don’t worry, I may post something on Roumazeilles.net every day, but it does not mean that I am in front of the keyboard every day. Far from it. I am using one small advantage of WordPress (the software package supporting my web site). I can write posts and schedule them for future publication.

That way, I have no limit to my inspiration. For example, I have currently scheduled weekly posts about optical illusions for the coming 6 months, a full week of feline-related news (daily posts next week), a full week of daily videos titled “when XXXXX get bored” in a couple of months.

Aim

The first objective was to install two sets of forums (in French and in English, as for the news blogs) in their respective URLs.

• English forums
• French forums

The locations have an influence on the rest since I still wanted to have a good integration with the wordpress blogs. You are expected to install the forums inside the blog.

So, here is how I did it.

Configuration

The main issue is to install the software on the web site in the right location. The package is prepared to be downloaded into a bbpress sub-directory inside the wordpress directory, so I had to change the directory name just after decompression (And I did it twice: Once for each language).

The config.php file is set according to the following:

domain = 'http://www.roumazeilles.net'; // Example: 'http://bbpress.example.com'
	// There should be both a leading and trailing slash here. '/' is fine if the site is in root.
	$bb->path   = '/news/en/wordpress/forum/';				   // Example: '/forums/'

// What are you going to call me?
$bb->name   = 'Roumazeilles.net - English forums';

// This must be set before running the install script.
$bb->admin_email = 'wp_en_@roumazeilles.net';

// Set to true if you want pretty permalinks.
$bb->mod_rewrite = true;

// The number of topics that show on each page.
$bb->page_topics = 30;

// A user can edit a post for this many minutes after submitting.
$bb->edit_lock = 60;

// Your timezone offset.  Example: -7 for Pacific Daylight Time.
$bb->gmt_offset = 0;

// Change this to localize bbPress.  A corresponding MO file for the
// chosen language must be installed to bb-includes/languages.
// For example, install de.mo to bb-includes/languages and set BBLANG to 'de'
// to enable German language support.
define('BBLANG', '');

// Your Akismet Key.  You do not need a key to run bbPress, but if you want to take advantage
// of Akismet's powerful spam blocking, you'll need one.  You can get an Akismet key at
// http://wordpress.com/api-keys/
$bb->akismet_key = '1234567890'; // Example: '1234567890'


// The rest is only useful if you are integrating bbPress with WordPress.
// If you're not, just leave the rest as it is.

$bb->wp_table_prefix = 'en_';  // WordPress table prefix.  Example: 'wp_';
$bb->wp_home = 'https://www.roumazeilles.net/news/en/wordpress';  // WordPress - Options->General: Blog address (URL) // No trailing slash.  Example: 'http://example.com'
$bb->wp_siteurl = 'https://www.roumazeilles.net/news/en/wordpress';  // WordPress - Options->General: WordPress address (URL) // No trailing slash. Example: 'http://example.com'

/* Stop editing */

if ( !defined('BBPATH') )
	define('BBPATH', dirname(__FILE__) . '/' );
require_once( BBPATH . 'bb-settings.php' );

?>

In order to get a more direct access to the forums I also corrected slightly the web site .htaccess file to add the following redirecting lines that lead to more user-friendly addresses used here.

redirect 301 /forum/en https://www.roumazeilles.net/news/en/wordpress/forum/
redirect 301 /forum/fr https://www.roumazeilles.net/news/fr/wordpress/forum/

Additional steps

Directory access rights

I also directly had to modify the directory access rights on the web server.

chmod 644 ./forum/ (this may not be critical)
mkdir ./forum/bb-cache/
chmod 644 ./forum/bb-cache/ (this is needed to update the site-management options)

Theme

bbPress is using themes very similar to WordPress. This is helpful to reduce the amount of work involved in preparing the forums for a nicer presentation when you already have a WordPress theme.

However, it is clearly painful to create the many files expected by bbPress (I hope that this will be simplified in the future). Anyway, thanks to DreamWeaver 3.x and its very good support of HTML templates, thanks to the organization of my pages with a significant part located in the CSS file, it has been relatively easy to do this task. But it still is too much pain for a good software package. At least, if you don’t do anything, the Kakumei theme is used by default ensuring that your forums are displayed conveniently.

Internationalization

Now, since my web site is set both in English and in French, there is no reason for the forums to be set differently. The installation in English is standard, but the French bit is a little different. You need to update a separate file (named bbpress.pot) that will provide all of the needed text transalations.

I installed one in the language directory. That’s all. It’s unofficial translation, but that’s good for me.

Last comments

In the end, after a rather long testing phase on a hidden web site, I have been able to set the forums up rather easily (it could be better, but bbPress is still in development stages, so the issues were understandable -and they were not overwhelming). The documentation is very terse, but the community is active and supportive.

One thing I had difficulties with is that bbPress does a heavy use of page caching. When changing something in the configuration, you have to remember to reload from the site (not from the cache) or you get the feeling that nothing is ever happenning whatever your moves. Annoying if understandable for performance reasons.

Some are said to have lost 20% compared to last year.

• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found
• 404 page not found

So I decided to add a spell checker to Opera (a plug-in to limit the risks of my own typos). I found a pretty simple one: Aspell for Windows that Opera will automatically recognize when it is installed. It has dictionaries for many languages (it is easy to create one from a mere word list in your own language if you need to). It supports several languages at the same time.

The only drawback is that it is not working in real-time, but you have to call it from a right-click on the mouse into the post box. I would have preferred an active underlining of wrongly-spelled words (like in Word or OpenOffice-Write).

May be you know a better one that you would like to share…

Note for new bloggers: Even if I have been waiting long for this, typos in your posts just pushes forward a bad image for your own web site. Go and correct this now.

Source: http://www.opera.com/support/tutorials/opera/spell check/.