2. Wordpress Overview Wordpress is an open-source and free Web publishing application, content management system( CMS) and blogging tool built by a community of developers and contributors. Wordpress, allows users to build dynamic websites and blogs that may be updated, customized and managed from its back-end CMS and integrated application and components.

3. Why use Wordpress? 1.Its open source 2. Flexible. 3. Safe and secure. 4.Customizable. 5.Easy to use. 6.Lots of support. 7. Hosts multimedia. 8.Mobile friendly. 9. Easy to manage.

4. Appearance and themes What is a Theme ? Fundamentally the WorPress Themes system is a way to “skin” your site. Yet it is more than just a skin. Themes can provide much control over the look and presentation of the material on your website A Wordpress Theme is a collection of files that work together to produce a graphical interface with a design for a weblog. These files are called template files. A Theme modifies the way the site is displayed, without modifying the underlying software. Themes may include customized files image files, style sheets(*css) custom pages as well any necessary code files(*php)

5. Wordpress plugins Plugins are tools to extend the functionality of Wordpress. The core of Wordpress is designed to be lean to maximize flexibility and minimize code bloat. Plugins offer custom and features so that each user tailor the site to their specific needs. Very useful plugins to install are :  All in one SEO pack Instant SEO that is easy for everyone  Disqus Comment System Advanced comments for Wordpress  SexyBookmarks Share to media sites like Facebook Twitter etc.  Wibya Toolbar  Wordpress Database backup  Facebook Like Box  Contact Form 7 and Contact Form to DB extention  WP touch

6. Wordpress Widgets Wordpress widgets (WPW) is like a plugin but designed to provide a simple way to arrange the varous elements of your sidebar content without having to change any code Themes usually have at least 1 or 2 sidebars. Sidebars are the narrow columns to the left or right of your blog posts. You can configure your sidebar by going to Appearance > Widgets. Each section in the sidebar is known as a “widget” that you can add or remove, and move up or down.

7. Wordpress allows Multi-user and multi-blogging Prior to version 3, WordPress supported one blog per installation, although multiple concurrent copies may be run from different directories if configured to use separate database tables. WordPress Multisites [21] (previously referred to as WordPress Multi-User, WordPress MU, or WPMU) was a fork of WordPress created to allow multiple blogs to exist within one installation but is able to be administered by a centralized maintainer. WordPress MU makes it possible for those with websites to host their own blogging communities, as well as control and moderate all the blogs from a single dashboard. WordPress MS adds eight new data tables for each blog. [21] As of the release of WordPress 3, WordPress MU has merged with WordPress.

8. Migration/wp-config.php WordPress makes migration from one server to another relatively simple due to its use of a configuration file (wp-config.php, usually located in your root). This file controls the base settings for a WordPress website including (but not limited to) your database connection settings.Due to the use of a configuration file, migrating from one server to another can be accomplished by the following basic steps: Download a copy of the WordPress files/folders (e.g. via FTP). Download a copy of the associated database (view the 'DB_NAME' row in the wp-config.php for the associated database to back up). Upload the files/folders to the new server. Create a new database on the new server and import the sql backup. Update the wp-config.php database fields to reflect.

9. Wordpress Setup Basic steps: 1. Install local server (WAMP or XAMP). 2.Start server 3. Wordpress package copy from sourse and paste in www directory 4. Open PHP my admin and create database. 5. Open wordpress package in browser 6. Run and install 7.Login in admin panel 8. Visit front site wordpress!

10. Wordpress Vulnerabilities Many security issues [69] have been uncovered in the software, particularly in 2007, 2008, and 2015. [69] In January 2007, many high profile search engine optimization (SEO) blogs, as well as many low- profile commercial blogs, were targeted and attacked with a Wordpress exploit. A separate vulnerability on one of the project site's web servers allowed an attacker to introduce exploitable code in the form of a back door to some downloads of WordPress 2.1.1. The 2.1.2 release addressed this issue an advisory released at the time advised all users to upgrade immediately.back door In May 2007, a study revealed that 98% of WordPress blogs being run were exploitable because they were running outdated and unsupported versions of the software. [75] In part to mitigate this problem, WordPress made updating the software a much easier, "one click" automated process in version 2.7 (released in December 2008). [76] However, the file system security settings required to enable the update process can be an additional risk. [77] [75] [76] [77] In June 2013, it was found that some of the 50 most downloaded WordPress plugins were vulnerable to common Web attacks such as SQL injection and XSS. A separate inspection of the top-10 e- commerce plugins showed that 7 of them were vulnerable. [79]XSS [79]

11. How to protect your Wordpress Page  Keep all WordPress installation, themes, and plugins updated  then run scans searching for any vulnerabilities against those plugins Developers can  Use tools to analyze potential vulnerabilities, including WPScan, Wordpress Auditor and Wordpress Sploit Framework developed by 0pc0deFR. However, not all vulnerabilities can be detected by tools, so it is advisable to check the code of plugins, themes and other add-ins from other developers.

12. Sources https://www.entrepreneur.com/article/241535 https://wordpress.org/about/features/ https://en.wikipedia.org/wiki/WordPress#Multi-user_and_multi-blogging https://en.wikipedia.org/wiki/WordPress#Vulnerabilities https://wordpress.org/plugins/