New WordPress Installs

[page_submenu alignment=”center” sticky=”true” bg_color=”#225277″ link_color=”#ffffff”][page_link link_url=”#Preparation” title=”Preparation Steps” id=”1577810119671-2″ tab_id=”1577810119672-7″] [/page_link][page_link link_url=”#Install” title=”Installation Steps” id=”1577810119761-7″ tab_id=”1577810119762-0″] [/page_link][page_link title=”Site Set-Up Steps” id=”1577810119826-5″ tab_id=”1577810119827-6″ link_url=”#SetUp”][/page_link][page_link title=”GDPR Compliance” id=”1577810119896-9″ tab_id=”1577810119897-2″ link_url=”#GDPR”][/page_link][page_link title=”Back To All Guides” id=”1577810119956-5″ tab_id=”1577810119956-4″ link_url=”/how-to-guides”][/page_link][/page_submenu]

PREPARATION STEPS

[divider line_type=”No Line” custom_height=”20″]
Add Subdomain With SSL
Verify PHP Version – ea-php70 Inherited

Please use caution when taking these steps. Check with Sherilyn/dev team if you have any questions/concerns before updating.

PHP Version should be ea-php70 Inherited

  • Under the Software section in the left sidebar, select MultiPHP Manager.
  • Select the domain for the site.
  • Select the domain and in the top, right dropdown options, click the PHP-FPM dropdown, choose OFF and apply.
  • Select the domain and in the same area, select the PHP Version dropdown, choose ea-php70 and apply.
  • Again, Select the domain and in the top, right dropdown options, click the PHP-FPM dropdown, select ON and apply.
  • One more time, select the domain and click the PHP-FPM dropdown, select OFF and apply.
  • Select the only the domain you are changing, change the PHP Version to Inherit and apply.
  • In the list of (sub)domains, you should now see the PHP Version ea-php70 and PHP-FPM Off.
Download Salient Theme
  • Log in to the Themeforest Account linked to the domain, found in the Domain Master List.
  • In the top right, hover over the username and in the dropdown, select Downloads.
  • Click the download button for Salient Responsive Multi-Purpose Theme and choose all files and documentation.
  • On your local machine, move the .zip file from downloads to somewhere easily accessible and unzip the file. The folder should contain a salient.zip file, this will be uploaded to the site via FTP in later steps.

INSTALLATION STEPS

[divider line_type=”No Line” custom_height=”20″]

After following the Preparation Steps above…

Install Fresh Copy Of WordPress In The New Dev Environment
  • In LW, navigate to the cPanel for unbridleddev.info.
  • Near the bottom of the cPanel interface, click on the WordPress icon in the Softaculous Apps Installer section.
  • Walk through the steps to install a new WP site… selecting:
    • https://[newsubdomain].unbridleddev.info for the installation location
    • Keep “In Directory” empty (will probably have to delete “wp”)
    • Add Site Name and Site Description for new site.
    • Use the following login info:
    • Leave “Limit Login Attempts” unchecked
    • Under “Advanced Options” change database name to something related to new site (all lowercase, no spaces)
    • Do not select a theme.
    • Leave all other settings unchanged.
    • Click Install
    • Go back to the file manager and add “Options -Indexes” to .htaccess file (without ” “)
Install Salient Theme

After downloading the Salient theme to your local machine following the steps listed above…

  • SFTP into the domain files.
  • In the public_html folder (or subdomain folder) click into the wp-content folder > themes.
  • Upload the salient.zip file from the Themeforest download.
  • Unzip the salient.zip file uploaded in the themes folder using the following command line in SSH.
ssh user@host "cd path/to/dir; unzip salient.zip"
  • Where user@host is the cPanel account name and the IP of the server hosting the site. (For example, it might be [email protected].). You will need the cPanel Username and Password for the site.
  • path/to/dir represents the file path to the directory where the WP files for this particular site start. For example, if this WP install is located in a subdomain folder, the path would be subdomain/wp-content/themes. (SubDomain.unbridleddev.info/wp-content/themes)
    • Note: the path is case sensitive. SubDomain.unbridleddev.info/wp-content/themes and subdomain.unbridleddev.info/wp-content/themes are different and will not return the same content. (You can use FTP or FileManager to locate the path if needed.)
  • The other pieces of the script should be written exactly as is.
  • Once you hit enter, the SSH will prompt you to enter a password. Use the cPanel password for that account.
  • If entered correctly, the SSH should show the files scrolling as they are unzipped.
  • Check in SFTP or the file manager to confirm, you should see a Salient folder in the themes folder.
  • Once you confirm the Salient folder is in the themes folder, delete the salient.zip file in SSH using the command below:
ssh user@host "cd path/to/dir;  rm -f salient.zip;"
  • The user@host and the path/to/dir will be the same used to unzip the file.
  • Click enter and use the same password for the user when prompted.
  • Confirm the salient.zip file is no longer in the themes folder using SFTP.
  • Log in to the site’s wp-admin and click on Appearance in the left sidebar. This will open the Theme’s page.
  • Activate the Salient theme.
  • Once activated, a page will appear prompting you to install required plugins. Click Begin Install Plugins at the bottom of that list.
  • Install and then Activate all the Plugins.

SITE SET-UP STEPS

[divider line_type=”No Line” custom_height=”20″]

Once WordPress and the Salient theme have been installed from the Install Steps above…

Install Plugins
  • Install and activate the Easy HTTPS Redirection plugin.
    • Under settings, select HTTPS Redirection and configure the settings.
    • Check the box for Enable automatic redirection to the “HTTPS”, choose The whole domain for Apply HTTPS redirection on and check the box to Force resources to use HTTPS URL.
  • Install and Activate Login No Captcha Recaptcha plugin.
  • Add site to Login Recaptcha settings in Google.
    • Log in to the Dev gmail account and go to the reCAPTCHA admin panel here. Select the applicable site list for the domain.
    • Click the GEAR icon in the upper right corner
    • Under the list of domains: 1) add the new domain, then 2) click the “+” symbol
    • Scroll down and click the SAVE button
    • This will take you back to dashboard so you’ll need to click the GEAR icon again
    • Click the ReCAPTCHA dropdown
    • Keys will drop down with a Site Key and a Secret Key. You will need these to configure reCAPTCHA settings so leave this page open.
  • Configure Login No Captcha settings in WordPress.
    • Under settings in the WordPress Dashboard, select Login NoCaptcha
    • Enter the Site Key and the Secret Key in their respective text areas and Save Changes
    • Once saved, you should see a functioning reCAPTCHA box under Example. If your reCAPTCHA box has an error message, check the google account to ensure you entered the domain correctly and check the keys to make sure they are correct.
[divider line_type=”Small Line” line_alignment=”default” line_thickness=”1″ divider_color=”default”]
[divider line_type=”Small Line” line_alignment=”default” line_thickness=”1″ divider_color=”default” custom_height=”35″]
  • Install and Activate the MainWP Child plugin.
    • Under settings, select MainWP Child
    • Check the box to Require unique security ID.
    • Click Save Changes. Note: Only click Save Changes once, every time you save, the Security ID will reset.
    • Copy the Security ID to add to MainWP.
  • Open mainwp.unbridled.in in a separate tab to add and configure MainWP.
Add Site To MainWP
  • Go to the MainWP Dashboard at mainwp.unbridled.in.
  • On the Overview page, select Add new site under Get Started.
  • Enter the domain in Site URL and change the dropdown to HTTPS.
  • Enter the Administrator username for the site.
  • Leave the friendly site name to the pre-populated name.
  • Select the Group associated with the site (Client, Emergent or Internal).
  • Under, Extensions Settings Synchronization, click select all.
  • Under Advanced Options, add the Child Unique Security ID copied from the MainWP Child settings in WordPress.
  • Click Add New Site. The page will scroll back up to the top and you will see a confirmation message as the site is added. If you receive and error message, go back through the set-up making sure you are using https://, the correct user name and the same Security ID from the site.
  • Once your site is complete, click on the Dashboard link within the confirmation message to navigate to the site’s MainWP Dashboard.
MainWP Specs
  • From the site’s dashboard, select Security Scan tab. One at a time, fix any item with a red X.
  • In the tabs, click Overview. Scroll down to the Themes box. Click on dropdown triangle in the upper right of that box and select inactive.  Delete any WordPress theme on this list (i.e. Twenty Sixteen, Twenty Seventeen, Twenty Something themes).
  • In the right column you’ll see a big green “Create Monitors” button, click that then click the Create New Monitor button (unbridleddev.info and Resume sites on unbridled.info are not added to Uptime Monitor).
  • On the Uptime Monitor Extension page, scroll down to Monitors and click the Add New Monitor button.
    • In the New Monitor pop-up, check the box for Load Child Site.
    • Under the Friendly Name dropdown, select the site domain to add.
    • Check the box next to Select Alert Contacts to Notify to notify [email protected] when a site is down
    • Click Create Monitor
MainWP Plugins
  • Once the site is added to Uptime Monitor, navigate to the Plugins page under the MainWP Dashboard in the left sidebar.
  • Select the Favorite Plugins Groups tab.
    • Then check the “Basic Tools” and “Salient” checkbox
    • On the right side, select only the site you are working on
    • Then under Installation Options, deactivate “Overwrite Existing Version”
    • Confirm Overwrite Existing is Un-toggled and the correct domain has been checked.
    • Click the “Complete Installation” button.
  • Once all plugins have completed installation, close MainWP and head back to the WordPress admin dashboard.
Manually Configure Uptime Robot (Only if not using MainWP)
  • Login to https://uptimerobot.com/
  • Click the “+ Add New Monitor” button (upper left)
  • Select “HTTP(s) from the dropdown
  • Add a friendly name (Use the client project number)
  • Insert the site url
  • Leave monitoring interval at 1 minute
  • Check email and text message box under the Alert Contacts section
  • Click “Create Monitor” button
  • Do the happy dance.
WordPress Plugins
  • On the plugins page, update plugins one by one until all are updated.
  • Make sure the following plugins are activated:
    • Akismet Anti-Spam
    • Better Search and Replace
    • Comet Cache
    • Envato Market
    • EWWW Image Optimizer
    • Gravity Forms
  • Configure settings for the following plugins:
    • Akismet Anti-Spam: enter the API key, check the Comments box and choose the silently discard option for Strictness. Save Changes.
    • Comet Cache: Select Yes, Enable Comet Cache and scroll down to click save.
    • Envato Market: Add an item under Single Use OAuth Personal Tokens. The Token and Salient ID can be found in Lastpass under the corresponding Themeforest account. To find which themeforest account to use, reference the Domain Master List.
    • EWWW Image Optimizer: At the top of the page, there is a paragraph starting with “New images uploaded to the Media Library…” which contains a text-link to Bulk Optimize, click this link. Click the Scan for Unoptimized Images button. Click the Start Optimizing button once the scan is complete. Let the optimizer run until all images have been optimized.
    • Gravity Forms: Add the License Key to the Gravity forms settings. The License Key can be found in Last Pass under Gravity forms. Save the settings once the key is entered. Gravity Forms will require an update once the key is saved.
    • Formidable Forms:
      • Download from https://formidableforms.com/account/downloads/
      • Upload, install & activate
      • Add the license
WordFence Security Plugin
  • Install and Activate the Wordfence Security Plugin
  • Once the page reloads, there will be a notice at the top of the page to optimize the Wordfence, click the button to Configure Settings.
  • End the Tour
  • The pop-up should be Apache + suPHP (recommended based on our test).
  • Click the buttons to Download .htaccess and Download .user.ini (if the are there). Click continue when able.
  • You will be redirected to the Wordfence Firewall Page. Select Dashboard under Wordfence in the left sidebar.
  • On the Dashboard, click on Global Settings next to the cog icon.
  • In Global Options, scroll to the bottom and click on the Import/Export option.
  • Open another live site (unbridled.store) and navigate to the Wordfece Global Settings – Import/Export dropdown for that site. Click the button saying Export Settings. Copy the Token provided in the pop-up. Close this site.
  • Back in the Global Options for your site, enter the copied code into the text box above to the Import Settings button. Once pasted, click the Import button.
  • Choose to Reload Page from the pop-up message.
  • In the left sidebar, select Scan under Wordfence. Click the button to Start a Wordfence Scan
  • Once the scan is done running, solve any problems found or ignore appropriate issues. If an issue has a big red X, tell Sherilyn.
GDPR Compliance
  • Follow the steps on this how-to guide to make the new site GDPR compliant.
  • Update the domain master list