• Worried about WordPress and GDPR? Start Here
• GDPR: What Does the New Data Regulation Mean for Your Website, Business and Data?
• How to make a WordPress website compliant to GDPR
• Automattic and the General Data Protection Regulation (GDPR)
• GDPR Compliance and WordPress Forms: Everything You Need to Know

Have a nice read!

Please, note: I am not a lawyer or your Legal Department, it all merely comes from my reading and my understanding.

Deployment

Cookies

First step (normally, this should be in place for quite some time already, since this started a long time ago): Add an informative message to inform visitors that you are collecting cookies.

I simply used a small plug-in (you can find others too) : Cookie Notice from dFactory.

Pros: It is working in various languges (and in English), it has been tested on more than 500,000 sites before mine, it starts in less than a minute.

Contact form

For many reasons, you will need to have a decent contact form (including to be able to answer GDPR-related requests). I recommend a simple and small (and free) forms editor like Ninja Forms.

In two minutes, you will have a working contact form. Don’t forget to add the checkbox with “By using this form you agree with the storage and handling of your data by this website” (This should be present on all your forms).

Then, you need to create a “Contact” page in WordPress. You will include the specific code to include the form you just created with the following shortcode:

Small GDPR support: Ninja forms allow you to setup forms without storing any data on the web site, reducing the load to comply with GDPR in simpler forms.

But, don’t forget to enable the sending of the confirmation message to the comment author (all the more because the post-form message includes mention of this confirmation – be consistent).

On top of this, if your web site includes a comment system (quite common fact), I recommend using a plugin to include the standard reminder checkbox: WP GDPR Compliance from Van Ons. Bonus: It makes some recommendations on various GDPR-related cases.

Data Protection Officer

Name somebody (with an email address) as the internal interface for all private data issues. It is not compulsory (for smaller teams) but it is so much clearer (and recommended) that somebody feels i charge of this (even the CEO). This person will be contacted bu visitors willing to know what data you collect and how to remove all their personal data from the web site (these are legal requirements).

Make sure that this person is reachable through a very easy interface (including the contact form or some other form).

Privacy policy

Above all, you must make sure that you can explain simply what are your intentions about private data you will collect (private data include email, name, IP address, etc.) and how you intend to comply with your legal obligations. This page must tell it all simply.

Try and write it right on the first attempt. You are legally bound to inform all your users any time you make a change (even simple ones)…

This is a WordPress page, rather than a poost (it must stay readily available and easily reachable by all even in the future).

I recommend to -more or less- follow the GDPR themes (it’s easier):

• Existence (or not) of a Data Protection Officer, in charge of the whole process of personal data handling
• Definition of data collection, handling, storing, transfer and removal processes
• Creation of a process to notify any data breach
• Explicit consent to data collection
• Right to access (and removal) of personal data

Access to personal data

You must give full access to any user’s personal data stored on the web site. This is realtively easy using a plugin (GDPR compliance from Scribit) and a specific page where you will only write the shortcode:

[gdpruserdata]

Of course, you can add some more details (refer to the plugin help information for more options).

Then, you can direct the requests to this page which will display the full breadth of personal data. As this is not a very nice page (rather dry reading), I recommend to keep it masked (I don’t feel it is necessary to show it permanently to all – answering requests should be enough).

Annoncement

Maybe not the worst or the most complicated, but I finally added a small message on the web site to announce the deployment of this whole process. Explaining is better than waiting for people to ask. And the message is positive: You care about your users and visitors.

WordPress informs me that the simple upgrade could improve speed by a ratio of 2x to 3x. So, it was easy to try.

Apart from an old plug-in which appeared unable to tolerate PHP7 (and that I was no longer using), the upgrade went well: I recommend the enormous speed increase for the web sites. This will be positive for my Page Rank in Google, for sure.

• You cannot avoid mentioning the Google webmaster tools. They do a lot of things and contain a performance evaluation but it is very crude and updated at frequency that you cannot control (several days if not several weeks between updates).
• Pingdom: Full Page Test has the enormous advantage of being precise and not requiring anything more than your browser. Give it an URL and it will tell you what happens and how fast. Great.
• Using Firefox, there is a nice plugin to observe the load times and the detail of what is loaded: Firebug. It will produce the graphic display below.



• But if you want to go even one step further, you should complete Firebug with the Google Page Speed extension, which will provide precise recommendations about what you could do to improve your page load times.

When you design a web site, it happens that you need to create graphs or technical charts. But this is quite difficult if you don’t spend a life drawing little charts or if you are not satisfied with the charts out of Excel (or OpenOffice Draw). For this, you need to have a good chart/graph package.

I found two of them that I want to share with you:

• amCharts is a set of Flash charts for your websites and Web-based products. AmCharts can extract data from simple CSV or XML files, or they can read dynamic data generated with PHP, .NET, Java, Ruby on Rails, Perl, ColdFusion, and many other programming languages. I like the final appearance even if they could have more of a designer touch.
• Chartle provides simple and interactive charts, maps, plots and diagrams. It’s still in beta right now (beg of 2010) but the results are quite good.

Here is what I had to do (and you may have to do) to get back full features and operations:

• Check that PHP was in safe_mode (not obvious, you’d have access to the server or its administrator).
• Ensure that access rights to the image upload directory (wp-content/uploads/*) were clearly set to 777 (here again, you’ll need to get support from the adminstrator, or a Telnet/SSH access to your account on the server).
• Since I did not re-install WordPress from scratch, but transfered the full config, I did not notice that the setting for storing of images was now bogus (the directory used on the previous server was not existing on the new server). So, I went back to the admin interface of WordPress > Settings > Miscellaneous and set again wp-content/uploads as the upload directory (first option on this page and default value as shown/written under it).

I hope that you will not be stung like me…

Be warned.

• Location of PHP.INI
• Update to mysql and gd libraries
• Compatibility with WP-cache

So, here is the nice little PHP script that I use here to redirect randomly to one of the right pages:

<?PHP
	$address_list = array(
		"/404/404-01.php",
		"/404/404-02.php",
		"/404/404-03.php",
		"/404/404-04.php",
		"/404/404-05.php",
		"/404/404-06.php",
/*		"/404/404-07.php",	*/
		"/404/404-08.php",
		"/404/404-09.php",
		"/404/404-10.php",
		"/404/404-11.php",
		"/404/404-12.php",
		"/404/404-13.php",
		"/404/404-14.php",
		"/404/404-15.php",
		"/404/404-16.php",
		"/404/404-17.php",
		"/404/404-18.php",
		"/404/404-19.php",
		"/404/404-20.php",
		"/404/404-21.php",
		"/404/404-22.php",
		"/404/404-23.php",
		"/404/404-00.php"
	);
	srand((double)microtime()*1000000); 
	$randomtopic = rand(0,count($address_list));
	header('Location: '.$address_list[$randomtopic]);
	exit;
?>

You can re-use it on your own web site if you want to. It’s free.

On another issue, the SPAM problem on the Internet became a major problem: Prorams try to make believe that they are human beings in order to insert advertisment anywhere a user can write (in the messages of a forum, in the comments of a blog, etc). For some time now, it became common that human users must identify themselves by their capacity to recognize a badly written word. Theoretically, this is a very efficient Turing test allowing to differentiate a human from a machine only by the results of their actions. Practically, the abilities of software programs have become so impressive that SPAM is slowly coming back again through those filters named CAPTCHAs (those images that you must read and copy back in order to be identified and approved for a specific action).

The problem appears to be: create CAPTCHA tremendously difficult for the automated software and, simultaneously, bring human beings to the task of checking scans of documents difficult to read by program.

The solution: reCAPTCHA.

The idea is to provide a CAPTCHA service to thousands of bloggers and forum administrators (WordPress, phpBB, etc.) Users are invited to recognize two words specifically difficult to read (profesional OCR programs failed during scans done by Carnegie Mellon University). The user must recognize them both. One is used to check that this is a human being, the other will fill a database of OCR translations that will be used to deliver even more CAPTCHAs and to improve the quality of a document scanned by Carnegie Mellon. Dual core technology: efficiently fight spammers and deliver millions of human users to improve the scan quality of thousands of ancient documents (without using slave labor).

Example of a difficult to read/scan document:

One of the key advantages is that most pro OCR programs can tell when they fail to recognize a character or a word (when they are not confident enough).

10 – Go to the IP addresss

Instead of connecting through the domain name (example.com), you could connect directly to the IP address (192.168.0.15). It the network stops you at the DNS level, this will allow you to reach the site.

9 – Go to the Google cache

As you certainly know, the Google search engine offers “cached” links after most of its results. Since those are copies of the original web site located on Google servers, it is convenient.

8 – Go to Google mobile search

Google mobile search is made for mobile phone users, but it can be used by countless others.

7 – Go to an anonymizer

Companies are offering to be the intermediate bewteen you and the web site you want to visit. Their primary offer is to hide you from the web site owner, but quite often, the side effect is also to run around the censorship set at your provider or company.

6 – Translate the web site

Several tools allow to translate the contents of a web site. Use them to access sites that are hidden from you.

• Altavista BabelFish
• Google translate

5 – Go to a proxy server

A proxy server is merely an intermediate between you and the web site you want to visit. They may not be hiding your identity like the anonimyzers, but the censors will probably not see your destination. Many are public. Quite a number of them are known and recognized (banned) anyway. A large list of public proxy servers.

4 – Web by email

Nearly low-tech compared to the rest and often quite slow, you can request the web pages you want to see. Using the right service, you could receive copies by email. It may be too slow to surf the web, but if you know where is the information you need, it’s working in many cases.

• webgate@vancouver-webpages.com
• Accessing the Internet by Email FAQ

3 – Change providers

Leave your company or your country for some other place where it is easier to access the Internet. Even if it may not be really reasonable for a country, leaving may be an option if your ISP is blocking some accesses. Another ISP may be more flexible.

2 – Use TOR

TOR is a distributed network of proxy servers. You connect to it, your request will go to TOR and be transfered to one or more of the TOR machines. You can even participate easily to the TOR network (bringing your own PC into the network, not merely using it – it improves the quality of your searches).

Main problems:

• Some web sites (e.g. SlashDot) block all TOR-enabled IP addresses because they have been used to abuse them.
• Installing a TOR node is more complex, but very efficient.

1 – Create your own proxy server

If all else fails, why not install your own proxy. In most cases, you can install one wherever you like and it will be known by you only. this way, you have a personnal anti-censorship tool that you can move any time you want. Several proxy servers written in PHP can be used for this:

• APAZ
• PHPproxy
• Prixvoxy
• Windows HTTP proxy at home

• The <?php tend to disappear (unless you start juggling)
• Some charcaters would not display at all (or badly)
• The overall presentation is pretty bland if you use <code>

So, I looked for a plugin (nearly everything in WordPress is done by adding on of those marvellous little code gems that can be included in a few seconds into the basic configuration) adapted to this task, easy to install (I don’t want to be stuck with heavy maintenance just for this), easy to use.

Here is the summary of what I checked and my opinion regarding them.

Code markup v1.1.1

Syntax

Just insert your code between <pre><code> and </code></pre>.

In my opinion

Pros:

• Correctly avoids WordPress text transformation
• It is still possible to add some manual formating in the code itself
• Compatible with WordPress 1.5, 2.0 & 2.1
• Single file plugin, to be activated from the WP dashboard

Cons:

• No syntax coloration

ElasticDog Code viewer v1.1

Syntax

Your code is stored in an external file, is displayed with indentation and auto line-return, may be downloaded separately.

In my opinion

Pros:

• Rather flexible presentation/format (e.g. line numbering)
• External file storage allows code duplication if it appears in several posts or in several locations)
• Single file plugin, to be activated from the WP dashboard; Plus described installation procedure

Cons:

• External file storage: Rather heavy duty solution for small snipets of code

Coffe2code Preserve code Formatting v0.9

Syntax

Just insert your code between <pre><code> and </code></pre> (some other tags can also be defined).

In my opinion

Pros:

• Correctly avoids WordPress text transformation
• Single file plugin, to be activated from the WP dashboard

Cons:

• Not updated since 2005. It is not even sure it was tested with WordPress v2.1 ?
• No syntax coloration

Priyadiâ€s Code Autoescape v2.0

Syntax

Just insert your code between <pre><code> and </code></pre>.

In my opinion

Pros:

• Correctly avoids WordPress text transformation
• Compatible with WordPress 1.5, 2.0 & 2.1
• Single file plugin, to be activated from the WP dashboard

Cons:

• No syntax coloration

CoolCode

In my opinion

Pros:

• Includes syntax coloration

Cons:

• The web site is 99% in Chinese (I did not complete a real evaluation).

Dean Code Source Syntax highlighting v1.1

Syntax

Just insert your code between <pre lang=”php”> and </pre> (specifying PHP language or any other language).

In my opinion

Pros:

• Correctly avoids WordPress text transformation
• Compatible with WordPress 1.5+
• Also includes syntax coloration (for many languages).
• Single file plugin, to be activated from the WP dashboard, and a CSS file to fine-tune formating

Cons:

• You must define CSS tags (minor problem since, for the others, you prefer to do so)

RobM Code entities v1.1

Syntax

In view of the current evolution of this type of plugins, even the author advises to use Priyadiâ€s Code Autoescape instead of his own.

Conclusion

As you can deduct from the information I provided here, my choice was Dean Code Source Syntax highlighting that I currently use for Roumazeilles.net. The strongest reason was clearly the ability to do syntax coloration to increase readability even for small code snippets (I care about my readers confort).

I can’t say I saw every aspect of these plugins in the comparison (benchmark) but it led me to a reasoned choice that I wanted to share with you. You may be doing a different choice; Feel free to tell us which one and why.

Examples

PHP code

Here is how PHP source code appears:

CSS code

Here is how a CSS file is displayed:

/*******************************/
/* Links                       */
/*******************************/
a:link    { color:#a0a010 }
a:visited { color:#606000 }
a:hover   { color:#e0e020; text-decoration: underline }
a:active  { color:#e0e020; text-decoration: underline }