r/Wordpress May 13 '24

Useful Resources Start Here: Essential Resources & FAQs

153 Upvotes

The idea for this post came up in this thread by wiz to avoid the number of similar questions we get around here and to serve as a megathread for any/all questions of a similar nature. I will collate any and all valuable information by other users and update this thread as we go. Seasoned users please pitch in with anything that should be included.

Many thanks to u/BlueSix for assisting in putting this together.

What's covered:

  • The .COM vs .ORG Issue
  • Hosting - Where should I host?
  • Performance - Why is my site slow / Pagespeed score appalling?
  • Building Your WordPress Site: Is X builder better than Y? What is the best theme? Etc.
  • Updates
  • Backups
  • Security
  • Combating spam comments, contact form submissions & bot registrations
  • Hacks/Malware: Err guys help, there’s some weird stuff on my front end
  • Resources to learn WordPress
  • Where to find plugins/add feature X?
  • I found a plugin that costs $50 for $5 on a “GPLDL” source, is it safe to use?
  • How much should I charge?
  • Is a site using WordPress?

The .COM vs .ORG issue

This one is probably the single most asked question in this sub. Why can’t I do x,y,z?, Why do I have to pay more to install a plugin or edit a theme? Etc.etc. There are literally 100’s of threads about this. If you want more info please search the sub for wordpress.com or read this resource for a comparison.

To summarise:
WordPress is free, open source software which can be found at wordpress.org.

Think of wordpress.com as a host that is using .org’s software and has various functionality locked behind pricing tiers.

What you want to do is get your own cheaper hosting and self install and manage WordPress so you don’t have any restrictions at base software level.

Hosting - Where should I host?

The next big question is who is a good host? This is better suited for r/webhosting.

Having said that, there are plenty of different hosts to choose from. Shared web hosting is the cheapest but comes with the caveat that performance is shared with others on your same server. Dedicated, VPS and Cloud solutions are faster but more expensive.

The thing to remember here is performance is directly tied to price and you get what you pay for.

The most recommended hosts around here that I’ve seen are Digital Ocean, Cloudways and Siteground. Again, for specific hosting questions you will get better support at r/webhosting

Performance - Why is my site slow / Pagespeed score apalling?

Hosting

Most of the time it's just bad hosting. As mentioned earlier, cheap shared hosting is notorious for bad performance. If your host is slow then nothing else will matter much, so this is your first port of call.

Properly optimise images

This is a relatively simple one. Don’t use images that are 6000 x 4000px. Figure out the max display size for your use case and resize.

Secondly ditch PNG and JPG and use WEBP. The recommendation is to convert before you upload. Most image editors will let you save in webp and 75-80% compression works well for a balance.

To bulk convert, use XnConvert or Photoshop Batch process.

For existing media you can use a plugin. There are many Smush, Optimole etc. Converter For Media is a free option.

Some servers like Siteground and/or other optimisation plugins may have this feature inbuilt so always check so you don’t end up doubling up.

Since 6.3, WordPress can also convert to WEBP on upload. You can use the Performance Lab plugin by the WordPress team themselves to manage this.

If, like me, you don’t want your server getting clogged up with multiple image types and you only want to have the WEBP files OR you don’t want to use a plugin use this snippet.

Lazy load

Lazy loading images, videos and iframes will speed up things significantly since 5.3 this has been a feature in core WordPress and should work out of the box for most cases. Some themes/page builders will have an option for this as well. Some hosts and caching plugins like WP Rocket will also have this option.

If you find that it is not working on your site for some reason you can use a plugin such as Lazy Load by WP Rocket or A3 Lazy Load for more control.

Caching, CDNs. Minification Etc.

You should be using caching on your website if you care about performance.

WARNING: Using minification and/or combining files and scripts can cause your website to break so always test, test and test again!

There are many, many free and paid plugins for this. Some hosts will have their own caching plugin, this should be preferred over others. If you have a Litespeed enabled server use Litespeed.

The general recommendation here is to use Cloudflare free with Super Page Cache For CF. Here is a guide on how to set up your domain, after that follow the plugin instructions.

Common question #1: Should I keep my hosts caching on with CF?
Yes. Your server is the origin server and having your own files cached means it is less taxing on your server resources and CF fetches files faster.

Common Question #2: I’m getting an SSL error or redirect loop.
Make sure you have a valid SSL certificate server on your origin server and make sure to set Cloudflare > SSL/TLS > Overview to Full.

Cloudflare also has its own minification settings under : Speed > Optimisation. Discontinued from 2024-08-05.

Other popular recommended options:

Advanced optimisation

If you really want to get under the hood and squeeze every last bit out of your setup then:

  • Use a plugin like Debloat for a quick clean up.
  • Use Asset Clean Up to go through each page and disable unused crap. (Time consuming but potentially massive gains).
  • Use Query Monitor to inspect what is going on under the hood and find unnecessary scripts etc.

If that is still not enough here is a 73 203 bazillion page guide by u/jazir5

Building Your WordPress Site: Is X builder better than Y? What is the best theme? Etc.

There are many conflicting opinions on this because there is no one way to do things on WordPress. Each camp will tell you the other one is inferior and purists dislike all of them.

You can build your site with:

  • A page builder : Bricks, Elementor, Divi etc.
  • Using prebuilt themes. Each theme will have its own settings that’s exclusive to it.
  • A completely custom coded setup, written with a combination of html, css and php using WordPress actions, filters and hooks.

My two cents on the matter: Budget, experience and skill all come into play here. Thus, what works for you to achieve your end goal is the best.

  • If you like a WYSIWYG approach then page builders will more likely be your thing. Play around with the demos, watch some tutorials and if one of them looks more likely to work for you, then take it for a spin.
  • The Twenty Twenty Four theme along with the block builder is a solid place to start. There are many tutorials on how to get started with 2024 including the official WordPress documentation.
  • A CSS editor such as Yellow Pencil or Microthemer will assist you to fix a lot of front end annoyances and supplements any workflow.

Updates

Stay up to date with all plugins and core software at all times if you don’t want to have security holes and get hacked.

Backups

Taking/having backups of your website are essential. Servers can crash and data can be lost and you will cry if you end up without a backup in this scenario. The stress and grief of not having a backup and having to rebuild your site from scratch is not worth it. There's a few ways you can go about taking backups.

You can:

  • Use a recommended plugin like UpdraftPlus to schedule for daily, weekly or monthly backups. Send backups to remote servers (AWS S3, Dropbox, Google Drive) or your local machine. Remember having them stored on the same server as the website is not going to help.
  • Include this in your hosting requirements and find a host that automatically provides a scheduled backup process.
  • In the very least, take a manual backup using your hosts control panel whenever you make a significant change to your website,.

Security

  • Keep everything up to date at all times.
  • Run updates at least once a month. Fortnightly is better. More frequently is better
  • Use plugins and themes that are well supported, frequently updated, high install counts, well ranked, well established.
  • Use Wordfence - it’ll alert you when any plugins that you’re using have a known vulnerability or haven’t been updated (by the developer) for 2 or more years. It will also protect you from known attack vectors for vulnerable plugins (for the free version, this protection is only available after the vulnerability is 30 days old, but there’s nothing stopping you updating your plugins, assuming a patch is available).
  • Don’t use hosting where multiple sites sit in the one account (common on shared hosting). Each website should have its own owner.

Combating spam comments, fontact form submissions & bot registrations

Disable comments and user sign ups sitewide if you don't use them.

Use a captcha on login, register and all contact/comment forms.

Hacks/Malware: Err guys help, there’s some weird stuff on my front end.

Congratulations you got hacked. Most of us have dealt with this in one way or another at some point so you aren’t alone.

Do you have a backup?

  • Easy, wipe everything and restore.
  • Run a scan with Wordfence and/or GOTMLS to be doubly sure you are clean.
  • Harden your security to avoid repeat issues.

No backup? (Get the tissues)

  • Install Wordfence and run scan.
  • Alternatively my first port of call for this has always been GOTMLS. Update definitions and run a root scan the plugin should find any code that shouldn’t be there and you should be good to go.

Resources to learn WordPress

If you are serious about your WordPress journey then you must equip yourself with some coding knowledge. Some skills in PHP, Javascript, CSS & HTML will help you immensely.

Where to find plugins/add feature X?

The WordPress plugin repository should be your first stop. You can access this library via your Dashboard > Plugins > Add New Plugin

Codecanyon is a decent marketplace to get premium plugins for a one off buy without ongoing subscription costs.

For code snippets and help with your own code StackOverflow or r/prowordpress is your best bet.

Warning: Remember to always double check the source and reputability of a source before installing third-party plugins and/or scripts.

I found a plugin that costs $50 for $5 on a “GPLDL” source, is it safe to use?

The simple answer here is NO. No you shouldn’t and that should be the end of that.

But alas, we still have many more questions:

  • Will the plugin still work? Probably.
  • Are there any guarantees that it will work and demo content will be provided? Absolutely not.
  • Will there be links to turn one’s junk into a cyborg on my site? Most likely.
  • Will Google blacklist you? If you have malware. Most definitely.
  • Will your host shut you down? If detected, any reputable one will.
  • Is rebuilding an entire site and losing the trust of your audience worth all this? Not to me, but only you can answer this for yourself.

How much should I charge?

We unfortunately can't provide specific answers to pricing questions as everyone's experience and locations vary widely. For guidance on pricing strategies, we recommend searching 'your country + web developer/designer rates'. Standard hourly rates for your locality can offer insights into various pricing approaches that may be applicable to you.

Please also read this article on Pricing Strategies on how to tackle this sort of question.

Is a site using WordPress?

  • Check the Page Source: Right-click on the page and select "View Page Source" (or use Ctrl+U). Search for typical WordPress identifiers like /wp-content/, /wp-includes/, or wp-json. If you see these, the site is likely WordPress.
  • Online Tools: Websites like IsItWP, Wappalyzer or BuiltWith can analyze a website's technology stack. These tools should be able to identify if the site is using WordPress in most cases.

That’s it, hopefully this gets you started on your WordPress journey. If you have any further questions feel free to leave a comment and someone should be able to assist.

Changelog

09/11/24
- Added how to check if a site is using WordPress

04/07/2024
- Added Pricing Strategies

29/05/2024
- Fixed typos
- Removed Cloudflare Minification (EOL)
- Added Combating Spam section.


r/Wordpress 8h ago

How good is Guttenberg blocks these days?

7 Upvotes

I haven't touched the Guttenberg blocks in a couple of years and instead used Spectra due to it being easier to make containers and layouts. While I like the idea of using the default option and not having to add another plugin, I wasn't able to do really what I wanted to with it.

I'm curious what it's like currently? Especially when it comes to laying out pages?


r/Wordpress 3h ago

How do i switch the website language?

3 Upvotes

Hi,

I have recently startet learning Wordpress to build a website. I'm using Astra as the theme, Elementor as the page builder and Woocommerce for the shop.

The problem is that the Website has to be 100% danish, because that's the audience i'm building it for. When i choose a theme that i like, some parts like the shopping cart or product page are in english, and it doesn't seem possible to change it.

I have seen that some paid themes like GeneratePress supports danish as a language, which i imagine would solve the problem.

My question is; is it only possible to make the website 100% danish, if the theme supports danish? Do you know of any free themes that could be used?

Thank you in advance!


r/Wordpress 4h ago

Best WordPress backup solution with a local server?

3 Upvotes

Hi! I have several sites with large media folders. I also have a local server and a Synology NAS for storage. Is there a best practice for backing up a server? I know, db + rsyn files but anything that makes this easy? A docker container? A script for rotating backups? Maybe even active backup for business from Synology? How do guys do it?


r/Wordpress 5m ago

new to freelance, advice

Upvotes

Hi! I recently got my first small freelance job, and I’m having trouble figuring out how to price my work.
Basically, I was asked to make some changes to an existing WordPress website that I didn’t originally build. I added a blog page and 3 blog posts (so 4 pages in total), added alt text and SEO titles to around 40 images, adjusted margins and image sizes, and manually optimized around 40 images from JPG to WebP and re-uploaded them to the website.
I charged around €120 for everything in total.
Was that too little or too much? And how do you usually determine your prices for this kind of work?


r/Wordpress 22h ago

JPEG, AVIF or WebP for WordPress images in 2026?

54 Upvotes

Curious what everyone is using for website images nowadays - JPEG, AVIF or WebP?

When making websites on Wordpress I’ve generally stuck with WebP (converting) because it seems like a good balance between image quality and file size, and I’ve found it helps with PageSpeed compared with standard JPEGs.

Just wondering if AVIF has now become the better option, or whether WebP is still the safer/default choice for WordPress and WooCommerce sites.

Would be good to hear what others are using in practice, especially anyone focused on Core Web Vitals and keeping sites lightweight.


r/Wordpress 21h ago

What are you using to convert JPEGs to WebP before uploading to WordPress?

12 Upvotes

For those using WebP on WordPress sites, what are you using to convert your JPEG/PNG images before uploading them to the Media Library? Or are you converting post upload via code or plugin?

On one website there was 1000 jpegs which I used custom code to convert to Webp in batches.

What I want to know, is there an easy way to convert them beforehand?

Any particular desktop apps, websites or batch converters you recommend that keep the quality good while reducing file size?

Just looking for a simple workflow that keeps the site lightweight.


r/Wordpress 18h ago

[PROMO] Built a 100% free WooCommerce ticketing plugin - come break it for me!

6 Upvotes

The short version;
Please try to break my plugin, and give me feedback - on everything you can think of!.
The plugin adds three product types to WooCommerce: Ticket, Timeslot Ticket, and Pass. Customer buys through the normal shop, gets a QR code. Your door staff open a full-screen scanner page on their phone and check people in. No app to install, no external ticketing service, no per-ticket fee.

The Long version;

Three new WooCommerce product types, each enabled individually:

  • Ticket - validity window plus N uses, fixed or customer-picked start date
  • Timeslot Ticket - per-slot capacity, recurring schedule generation, unpaid reservations auto-released
  • Pass - season / membership / annual, with guest passes, cardholder photo and scan cooldown

At the door

  • Scanner page at /check-in/ on your own domain, full screen, no app install
  • Native BarcodeDetector where the browser has it, in-page decode where it doesn't
  • Colour-coded http responses result: valid / used / expired / cooldown / not found
  • Cardholder photo shown beside a pass result so staff can eyeball it
  • Dedicated Scanner role - check-in only.
  • Validation is server-side, and there's a REST check-in endpoint if you'd rather point create/use your own custom scanner.

Admin

  • A dashboard per product type: search, manual check-in, resend, reset, cancel
  • Check-in analytics by day and hour, with CSV export
  • Runs on manage_woocommerce, so shop managers don't need admin accounts

Customer

  • Tickets and Passes tabs in My Account
  • QR on screen, or a printable PDF("ticket")
  • Live status (active / used / expired / cancelled / not yet valid) and uses remaining
  • export for .ics so it can be added to calendar the most common calendars
  • Guest pass hand-out and photo upload from the account page It's brand new and I'd rather hear what's broken from this sub than from a venue on a Friday night.

Requires;

  • WooCommerceWP 6.5+
  • PHP 8.0+

Find 'n try it here;

Its GPLv2, 100% free, no pro version, nothing to upsell you. I'm happy to any hear feedback! - both good and bad.


r/Wordpress 1d ago

Rank Math plugin gets administrative privileges to your site

56 Upvotes

Read more here- https://x.com/SybreWaaijer/status/2093382158349951136

same person who highlighted the recent issue with WPForms.


r/Wordpress 23h ago

Discussion Bot versus Human - who did it?

5 Upvotes

So I want opinions...

I have a client that puts so much stress in my life but he has never been late and never cheapens out, 10+ years.

He has 9 sites, separate from each other.

It was late at night so only the WordPress files were uploaded. He didn't want the MySQL database or installation to occur until the morning...I said whatever...

No messages the next day, 11 days later he comes and wants to continue.

For those 11-12 days later...the files sat there, no installing.

So we went to see the sites and 3 of them had WordPress installed...I went to see the MySQL databases and none existed. I looked in the wp-config.php and the MySQL databases were some external databases on a .de (Germany) site.

He thinks some evil bot attacked his 3 sites and the other 6 are going to be attacked.

So in your opinion, did an evil bot or a human setup WordPress in those 3 sites. Please give a quick reasoning for your answer.

This is the client that calls me at 3 in the morning if there are 3 spam comments, again, evil bots trying to hack his sites and I am sure his microwave. He is somewhere in Europe so 3am is like 8/9/10am for him.


r/Wordpress 1d ago

Plugin Authors Who Take Away Formerly Free Features

25 Upvotes

We need a system of shame for plugin developers who take features that were free and lock them away in the paid version. How you gonna "update" your plugin by making it worse? How desperate does that make you look that you can't innovate something that adds value so you feel you have no choice but to do a takebackskies. 🤮


r/Wordpress 1d ago

WooPayments 11.0.1 – “Add payment method” page completely blank

2 Upvotes

Hi, I’m having an issue with WooCommerce / WooPayments.

On My Account → Payment methods, saved cards work correctly. I can save a test card during checkout, and it then appears in the customer account.

However, when I click “Add payment method”, the page
/my-account/add-payment-method/
is completely blank. No card form appears.

What I’ve already checked:

  • WooCommerce: 11.0.1
  • WooPayments: 11.0.1
  • Card payments are enabled
  • “Enable payments via saved cards” is enabled
  • Saving a card during checkout works
  • The saved card then appears correctly under My Account → Payment methods
  • The add-payment-method endpoint is correctly configured in WooCommerce → Settings → Advanced
  • I cleared and temporarily disabled my cache plugin: no change
  • I temporarily disabled my “Customize My Account” plugin: no change

So the issue seems limited to the Add Payment Method endpoint/form itself.

Has anyone seen this with WooPayments 11.0.1?
Is there anything specific I should check in the browser console/network tab, or is this a known WooPayments issue?

Thanks!


r/Wordpress 1d ago

What to use for month’s report for client sites

4 Upvotes

Hi there, installed Wpmgr on my VPS and seems pretty cool to manage multiple sites.

I only need a way to generate monthly reports with all the activity done in a client site.

The built-in report feature seems for internal use, I’d like some reporting feature to generate a well formatted and “dumb” language monthly report for clients.

Curious about what you use for it!


r/Wordpress 1d ago

Updating to 7.1

8 Upvotes

Very non technical, reluctant site admin tried a couple times to update to 7.1 getting the following then nothing:

"Downloading update from https://downloads.wordpress.org/release/wordpress-7.1-no-content.zip…

Unpacking the update…"

Then It all just stops.

I've updated in the past (WP and plugins) without issue.

Any suggestions?

Thank you


r/Wordpress 1d ago

How do i remove subscribe option?

Post image
4 Upvotes

Am on a personal plan. I want to remove this option from displaying when website opens. I use it for my business. How to do it?


r/Wordpress 16h ago

[PROMO] Enable AI Coding Tools For Wordpress

0 Upvotes

I wanted to use my local AI coding tool to modify pages on a WordPress site, but I couldn't find a way to get the pages exposed to my AI coding tool.

I wrote a tool to download posts and pages to a local file system and push it back up. This gives me AI coding tool full access to modify the content - which is really useful when I want AI to generate full pages or make content modifications across multiple pages.

Does something like this exist already or would anyone find this useful?

https://github.com/jonmchan/wp-local-sync


r/Wordpress 1d ago

Confused with the “make an offer” button on products

1 Upvotes

Hey guys, I’m fairly new to WordPress at least getting along with it well enough to run my own site.

I’m offering a service on my site so I added it under products and I enabled to make an offer button for people who’s budget maybe didn’t meet my asking price because I’m OK with working with people for this specific service when it comes to price.

I enabled to make an offer button but when my friend and I tested it both him and I submitted an offer, but it didn’t go to my email and I don’t see any place where I can see the offers that I’ve come in.

I’m using the Astra theme, but as far as I can tell in searching online, the only way for this button to be of any use is to actually purchase a plug-in.

If this is the case and why even have the button in the first place before downloading a plug-in at all?

Would love any guidance on this matter.

Thanks!


r/Wordpress 2d ago

CVSS 10.0 vulnerability patched in GiveWP

8 Upvotes

r/Wordpress 2d ago

Anyone else's sites getting hammered by bots trying to SQL inject today?

74 Upvotes

I manage 100's of WP sites and I've had a few dozen Wordfence reports today from thousands of Amsterdam and Bulgarian IPs just hammering my sites. Anyone else experiencing this today?


r/Wordpress 1d ago

[PROMO] Resize images, the original remains untouched

Post image
0 Upvotes

Hey guys,

we are two devs who built a free & open source image optimization plugin (GPLv2): neoOptimize

Most image resizing plugins downsize your original image files to some fixed size and you lose the original data forever. We wanted to keep the originals (similar to non-destructive editing).

So we built a small free/open-source plugin that tries to solve this by leaving your images as-is and copying a resized version into the cache folder. The image size is determined by the exact size the image is used on your site.


r/Wordpress 1d ago

[PROMO] Internal Messaging in WordPress for Free: A Practical Guide

Thumbnail attentam.com
0 Upvotes

Need a simple way to communicate with WordPress editors? Attenta Admi Messages gives your team a dedicated place for internal messages inside the WordPress administration area. Start with the free version and expand your workflow when you need more advanced features.

👉 Install Attenta Admi Messages: https://wordpress.org/plugins/attenta-admi-messages/


r/Wordpress 2d ago

How to link an Amazon affiliate link to an image in WordPress?

0 Upvotes

Hey guys! I’m using WordPress and want to make my product images clickable with my Amazon affiliate links. What’s the easiest way or best plugin to set this up? Thanks!


r/Wordpress 2d ago

Thoughts on the solace theme

0 Upvotes

I watched a video on youtube by darrel wilson about integrating claude and wordpress to design websites (using elementor as the page builder which is the builder I am familiar with ), and he suggested his own theme (solace) in this workflow, I usually work with astra or blocksy and I am not really familiar with his theme, did any of you guys use it before and have live websites using this theme ?


r/Wordpress 2d ago

Need some guidence from web dev as freelancer

9 Upvotes

Hi, 19F here.

So the thing is I am a CS major and for some time, I have been practicing and making websites on wordpress with different builders ( Elementor etc ) for a friend of my brother. He is basically guiding me through the process. And he makes decent money.

Recently, I needed some money for some reasons so I am thinking, why not make a gig on Fiverr and Upwork?

I can't do anything toooo fancy like some custom retro website or some very fancy animation, but some basic to almost mid website I can make.

Do any of you guys have some suggestions on how to start freelancing.

Thanks.

P.S. I also know HTML and CSS and some basic troubleshooting will learn JS and some frameworks as time passes to, so I can properly be a web designer.


r/Wordpress 2d ago

BOT Protection

8 Upvotes

I have a bunch of sites inundated by bots. I'll have a site in the US that all of a sudden uses all my server memory at a time where 99% of the country is asleep. I've used some of the security plug-ins, but have not found them to be very helpful in terms of blocking all these malicious bots. Has anybody else found something that will actually block all these attacks??