There are many “experts” out there who say you must never update software until you make sure other people who update their versions figure out whether there are any issues or problems with the software update. While I’m not going to say this is a good or bad thing, I will point out that most of these “experts” are talking about enterprise-level software applications… and even operating systems.

When it comes to WordPress, this mindset of “waiting to see what happens” is just flat wrong and a very bad practice. I’ve run into so many site owners who are having a problem with their site only to find out they haven’t updated WordPress, a theme, or plugins in almost two years… because they were “waiting to see if something was bad with an update”. Let’s take a look at why waiting to update is a very bad practice.

We probably need to start by asking the question, why are there updates? The most common answer to this question is that most updates are released (for themes, plugins, and core WordPress) because a fix to a bug or a security issue needs to be patched. So by not updating, you are leaving your sites buggy and open to being hacked. It is extremely easy to do a little Google search to find a site that has not been updated and therefore ripe for the hacking. This goes especially true for plugins. Plugins seem to be a greater source of security holes than WordPress itself… so if you are only updating WordPress but not wanting to update your plugins, you are moving yourself to the front of the line for hackers looking to cause trouble.

Now you might be saying what does it matter if I get hacked… I’ll just fix/restore my site.. While it might be true you can “restore” your site, you might not realize the damage done to your site. Not only does the hacker know your site is vulnerable because of an outdated plugin, but now Google knows about your issues. A hacked site can lose position on search engine rankings. Google will even de-list and de-index your site because it finds malicious code that the outdated plugin let outsiders leave on your site. And now you have to ask yourself, what good is a website if no one can find it on the internet (through search).

Most people who don’t update their themes and plugins probably fall into the category of being afraid you’ll break your site. While this is a valid concern, it should NEVER stop you from updating a plugin or theme or WordPress… Why? Because there are so many easy ways to backup your site so that if something happens during the upgrade process you can easily roll-back the update and restore your site and do a little more focused work on making sure the upgrade takes place. Using BackupBuddy can be your security blanket to give you the courage to update as soon as you see an update is available. Here’s a quick 1-2-3 to help you update your plugins, themes, and core WordPress.

1. As soon as you see an update is available, press the one-click button to perform a backup of your site using BackupBuddy.
2. Go to WordPress’ update screen and update everything that needs to be updated.
3. If everything went well… you’re done. If anything didn’t work out, just use BackupBuddy’s restore capability to roll your site back to before the update.

There’s another reason to make sure you are updating your plugins and themes that has nothing to do with security. (This is a real example.) WordPress recently changed the way the media uploader handled the uploading and management of images in the admin area of WordPress. If you had a plugin or theme that uploaded images as part of a feature… guess what happens if you choose NOT to update your plugin… Your plugin now fails to work because WordPress changed the way images are uploaded.

The great thing about being involved in an open-source project (WordPress.org is an open-source project) is that thousands of developers are banging on the code and constantly moving the project forward. This means things will change over time. And to take advantage of the expanded capabilities, you MUST keep all your code up-to-date.

If this post was too long and you really didn’t want to read it (TL:DR), here is the summary. Always update your plugins, themes, and core WordPress otherwise you are shooting yourself in the foot!

Okay…so this doesn’t so much have to do with cleaning up your site per say! But it is still a good thing to know how to clean up the admin area of WordPress to better suit the needs of your client.

If you haven’t worked with a client yet who wants you to remove all that “blog stuff” from their site, chances are you eventually will. There are a number of things you can do, from the simple to the more advanced, that will turn your site into a content management system rather than a blogging platform.

Set the home to page to a static home page

By default WordPress sets the home page as where your posts display. If the client isn’t going to be creating posts, this is a pretty obvious and necessary change.

To change this, you’ll go to Settings > Reading and “Front page displays” from “Your latest posts” to “A static page.” You’ll then select the page you want to use as the home page from the drop down menu.  If you won’t have posts page, you can leave the drop down menu on “Select.”

Turn off comments

Comments are typically associated with blog posts, so removing this feature for a non-blogging site is a good idea. You’ll change your comment settings under Settings > Discussion.

You’ll also want to go into each page and uncheck the “Allow comments” and “Allow trackbacks and pingbacks on this page.” You may need to open “Screen Options” and select Discussion to uncheck those options.

This is the point at which things become more advanced. So please continue with caution and within your skill level.

Get rid of all widgets that have to do with blogging

If your user were to go into the widget area, they will see all the available widgets, including ones that are related to blogging such as the “Recent Posts” widget. Seeing this may confuse them and make them think you’ve built them a blog.

To get rid of the blogging widgets, you’ll add the following code to functions.php

function unregister_default_wp_widgets() {
unregister_widget('WP_Widget_Calendar');
unregister_widget('WP_Widget_Archives');
unregister_widget('WP_Widget_Categories');
unregister_widget('WP_Widget_Recent_Posts');
unregister_widget('WP_Widget_Recent_Comments');
unregister_widget('WP_Widget_RSS');
unregister_widget('WP_Widget_Tag_Cloud');
}
add_action('widgets_init', 'unregister_default_wp_widgets', 1);

Remove blogging related dashboard items

There are a number of things that appear in your dashboard by default that are blogging related, such as the QuickPress section. You can remove these from your dashboard by, again, adding code to your functions.php file.

function remove_dashboard_widgets() {
global $wp_meta_boxes;
unset($wp_meta_boxes['dashboard']['side']['core']['dashboard_quick_press']);
unset($wp_meta_boxes['dashboard']['normal']['core']['dashboard_incoming_links']);
unset($wp_meta_boxes['dashboard']['normal']['core']['dashboard_right_now']);
unset($wp_meta_boxes['dashboard']['normal']['core']['dashboard_plugins']);
unset($wp_meta_boxes['dashboard']['normal']['core']['dashboard_recent_drafts']);
unset($wp_meta_boxes['dashboard']['normal']['core']['dashboard_recent_comments']);
unset($wp_meta_boxes['dashboard']['side']['core']['dashboard_primary']);
unset($wp_meta_boxes['dashboard']['side']['core']['dashboard_secondary']);
unset($wp_meta_boxes['dashboard']['side']['core']['dashboard_recent_drafts']);
}
add_action('wp_dashboard_setup', 'remove_dashboard_widgets' );

Remove “Posts” from menu and “+ New” from admin bar

If your client is not going to be keeping a blog, the “Posts” menu is obviously useless to them. Plus some clients will assume you’ve built them a blog site when they didn’t want one if they see this option available. The following code, when added to functions.php, will remove the Posts, Dashboard, Comments, Appearance, Plugins, Tools and Settings menu items from the menu on the left of the dashboard. It will also remove the WordPress logo, Updates and Comment links from the admin toolbar.

function remove_menus() {
global $menu;
$restricted = array(
__('Posts'),
__('Dashboard'),
__('Comments'),
__('Appearance'),
__('Plugins'),
__('Tools'),
__('Settings')
);
end ($menu);
while (prev($menu)){
$value = explode(' ',$menu[key($menu)][0]);
if(in_array($value[0] != NULL? $value[0]:"", $restricted)) {
unset($menu[key($menu)]);
}
}
}
add_action('admin_menu','remove_menus');
function remove_admin_toolbar_links() {
global $wp_admin_bar;
$wp_admin_bar->remove_menu('wp-logo');
$wp_admin_bar->remove_menu('updates');
$wp_admin_bar->remove_menu('comments');
}
add_action('wp_before_admin_bar_render', 'remove_admin_toolbar_links');

All of these suggestions are an excellent start to de-blogging WordPress.  To see what else you can do and to learn about specific plugins that will help you manage your content (i.e. files and images), be sure to check out the WordPress as a CMS webinar.

If you’re not a member of WebDesign.com yet, be sure to check out our membership options.